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DEPARTMENT  OF  DEFENSE 

Defense  Advanced  Research  Projects 
Agency 

[  32  CFR  Part  286d  ] 

PRIVACY  ACT  OF  1974 
Notice  of  Proposd  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (P.  L.  93-579,  88  Stat.  1896,  5  U.S.C. 
552a)  which  requires  each  Federal  agen¬ 
cy  that  maintains  any  system  of  records 
as  defined  in  the  statute  to  promulgate 
rules  pursuant  to  the  provisions  of  the 
Act. 

Notice  is  hereby  given  that  the  De¬ 
fense  Advanced  Research  Fhojects 
Agency  proposes  to  add  Part  286d  to  im¬ 
plement  the  provisions  of  the  Privacy 
Act  of  1974. 

§  286d.l  Source  of  regulations. 

The  Defense  Advanced  Research  Proj¬ 
ects  Agency  is  governed  by  the  Privacy 
Act  implementation  regulations  of  the 
Office  of  the  Secretary  of  Defense,  32 
CFR  Part  286b. 

As  indicated,  the  Defense  Advanced 
Research  Projects  Agency  implementa¬ 
tion  of  the  Privacy  Act  is  provided  for  in 
32  CFR  Part  286b. 

August  14, 1975. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives,  OASD  ( Comptroller ) . 
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Defense  Civil  Preparedness  Agency 
[  32  CFR  Part  1814  ] 

PERSONAL  PRIVACY  AND  RIGHTS  OF  IN¬ 
DIVIDUALS  REGARDING  THEIR  PER¬ 
SONAL  RECORDS 

Notice  of  Proposed  Rulemaking 

Notice  is  hereby  given  that  for  pur¬ 
poses  of  implementing  the  Privacy  Act 
of  1974  (Pub.  L.  93-597),  the  Defense 
Civil  Preparedness  Agency,  which  is  a 
component  of  the  Department  of  De¬ 
fense,  proposes  to  issue  a  new  Part  1814 
of  Title  32  of  the  Code  of  Federal  Reg¬ 
ulations. 

Notice  is  also  given  that  the  Director, 
Defense  Civil  Preparedness  Agency  per¬ 
sonally  determines  that  he  should  exempt 
classified  records  within  systems  of  rec¬ 
ords  and  investigatory  material  compiled 
for  law  enforcement  purposes  within  sys¬ 
tems  of  records  from  certain  of  the  pro¬ 
visions  of  the  Privacy  Act,  but  only  to 
the  extent  such  are  contained  in  the 
systems  of  records  maintained  by  DCPA, 
and  for  which  systems  notices  are  pub¬ 
lished.  It  is  proposed  to  exempt  these 
records  by  rule  from  the  provisions  of 
subsections  3  (c)  (3) ,  (d) ,  (e)  (4)  (I) ,  and 
(f)  of  the  Act  as  permitted  by  subsec¬ 
tions  (k)(l)  and  (k> (2).  The  reasons  for 
this  exemption  are  set  forth  in  the  notice 
of  proposed  rulemaking. 

The  Defense  Civil  Preparedness  Agency 
is  issuing  this  part  in  implementation  of 
the  Department  of  Defense  regulation 
(32  CFR  Part  286a)  as  DCPA  is  a  com¬ 


ponent  of  the  Department  of  Defense 
and  its  authority  to  issue  this  part  is 
subject  to  the  provisions  of  the  Depart¬ 
ment  of  Defense  regulation.  The  DoD 
regulation  contains  a  number  of  restric¬ 
tions  on  DCPA  action  as  a  component, 
not  all  of  which  are  set  forth  in  this  part. 
The  DoD  regulation,  as  well  as  the 
Privacy  Act  itself,  should  be  referred  to 
in  understanding  DCPA  action.  Notice  of 
proposed  issuance  of  the  Department  of 
Defense  regulation  is  being  published 
contemporaneously  with  this  notice. 

DCPA,  along  with  other  Department 
of  Defense  components,  has  published 
systems  notices  regarding  its  systems  of 
records.  See  Federal  Register,  August  13, 
1975. 

The  purpose  of  the  proposed  part  is  to 
set  forth  procedures  whereby  an  indi¬ 
vidual  can  be  notified  if  any  of  the  sys¬ 
tems  of  records  described  in  the  systems 
notices  contain  a  record  pertaining  to 
the  individual  who  requests  the  informa¬ 
tion.  and  it  sets  forth  identity  verifica¬ 
tion  requirements,  procedures  for  grant¬ 
ing  an  individual,  upon  his  request,  ac¬ 
cess  to  a  record  or  to  information  per¬ 
taining  to  the  individual,  the  procedures 
for  reviewing  a  request  from  an  individ¬ 
ual  concerning  amendment  of  a  record, 
procedures  for  making  a  determination 
on  a  request  for  amendment,  and  for 
review  of  an  initial  adverse  determina¬ 
tion.  Procedures  governing  the  condi¬ 
tions  under  which  disclosure  of  personal 
information  may  be  made  are  also  set 
forth  as  well  as  the  exemption  of  certain 
records  from  certain  of  the  requirements 
of  the  Privacy  Act. 

The  reasons  for  making  the  specific 
exemptions  are  : 

(1)  It  may  be  that  in  any  of  the  sys¬ 
tems  of  records  subject  to  the  FTivacy 
Act  and  maintained  by  DCPA,  there 
could  be,  although  such  is  unlikely,  in¬ 
formation  properly  classified  under  Ex¬ 
ecutive  Order  11652  and  which  is  re¬ 
quired  by  the  Executive  Order  to  be  kept 
secret  in  the  interest  of  national  defense 
and  foreign  policy.  It  would  be  infeasible 
to  designate  which  system  of  records 
might  now  or  at  some  time  in  the  future 
contain  such  isolated  items  of  informa¬ 
tion.  Therefore,  it  is  proposed  that,  solely 
to  the  extent  that  specific  records  or 
items  of  information  within  a  system  of 
records  are  properly  classified,  such  spe¬ 
cific  records  would  be  exempt  from  the 
requirements  of  subsection  3(d)  which 
generally  relates  to  access,  review  and 
record  amendment.  Allied  to  subsection 
3(d)  is  the  requirement  in  subsection 
3(f)  to  establish  a  procedure  to  deal  with 
this  access. 

(2)  DCPA  does,  upon  occasion,  con¬ 
duct  limited  investigations  for  purposes 
of  civil  law  enforcement,  particularly 
enforcement  of  the  Federal  Civil  Defense 
Act  and  the  regulations  and  guidance 
issued  thereunder.  DCPA  is  involved  in 
the  enforcement  of  Sections  203  and  209 
of  the  Federal  Property  and  Administra¬ 
tive  Services  Act,  and  DCPA  regulations 
relating  to  donation  for  civil  defense  of 
Federal  surplus  personal  property.  DCPA 


provides  financial  assistance  to  States 
and  localities,  and  others,  and  this  finan¬ 
cial  assistance  is  subject  to  various  laws 
and  regulations  such  as  Title  VI  of  the 
Civil  Rights  Act  of  1964.  Also,  various 
provisions  of  law  relating  to  equal  em¬ 
ployment  opportunity  and  the  like  gov¬ 
ern  DCPA  programs.  Any  of  these  could 
involve  investigations  of  discrimination 
or  of  noncompliance  with  Federal  law. 

Unless  investigatory  records  are  ex¬ 
empt,  DCPA  could  be  required  to  notify 
an  individual  of  investigatory  material 
contained  in  a  record  pertaining  to  him, 
permit  access  to  such  record,  permit  re¬ 
quest  for  correction,  make  available  to 
an  individual  any  required  accounting 
and  publish  the  categories  of  sources  of 
the  records.  Investigatory  materials  com¬ 
piled  for  law  enforcement  purposes  could 
contain  unsolicited  information  from 
sources  outside  DCPA  as  well  as  mate¬ 
rials  needed  by  DCPA  personnel  per¬ 
forming  investigatory  functions  and  this 
latter  material  may  include  unverified 
information.  Further  certain  investiga¬ 
tive  material  may  be  subject  to  require¬ 
ments  under  5  U.S.C.  552  for  privacy 
reasons. 

Disclosure  of  the  existence  of  material 
and  identity  of  sources  of  information, 
including  those  filing  complaints,  might 
hamper  law  enforcement  by  prematurely 
disclosing  the  knowledge  of  possible  ille¬ 
gal  activity  and  the  evidentiary  basis  for 
possible  enforcement  actions.  Accord¬ 
ingly,  it  is  found  that  the  public  interest 
and  public  policy  in  maintaining  an  ef¬ 
fective  enforcement  program  requires 
exemption  with  respect  to  investigatory 
material  compiled  for  law  enforcement 
purposes  and  contained  in  the  records 
systems  notices  described  in  this  regu¬ 
lation. 

Therefore,  it  is  proposed  that  solely  to 
the  extent  that  specific  records  or  items 
of  information  within  a  system  of  rec¬ 
ords  are  Investigatory  material  for  law 
enforcement  purposes,  such  specific  rec¬ 
ords  would  be  exempt  from  the  require¬ 
ments  of  subsection  3(d)  which  gener¬ 
ally  relate  to  access,  review  and  record 
corrections.  Allied  to  subsection  3(d)  is 
the  accounting  disclosure  requirement 
in  subsection  3(c)(3),  and  the  require¬ 
ment  to  establish  a  procedure  in  subsec¬ 
tion  3(f).  Further,  there  might  be  in¬ 
volved  the  confidentiality  of  a  source  so 
exemption  from  subsection  (e)  (4)  (I)  is 
provided  for. 

Any  person  interested  in  the  proposed 
regulation  set  out  below  may  participate 
in  this  proposed  rulemaking  by  submit¬ 
ting  written  data,  views  or  arguments  on 
this  proposed  Part  1814  of  Title  32,  Code 
of  Federal  Regulations.  These  should  be 
submitted  to  the  Director,  Defense  Civil 
Preparedness  Agency,  The  Pentagon, 
Washington,  DC  20301  on  or  before  Sep¬ 
tember  20, 1975. 

Chapter  XVIII  of  Title  32.  Code  of 
Federal  Regulations,  is  proposed  to  be 
amended  by  establishing  a  new  Part  1814 
as  follows: 
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PART  1814 — PERSONAL  PRIVACY  AND 
RIGHTS  OF  INDIVIDUALS  REGARDING 
THEIR  PERSONAL  RECORDS 

Sec. 

1814.1  Purpose  and  scope. 

1814.2  Policy. 

1814.3  Definitions. 

1814.4  Disclosure  of  record  to  person  other 

than  the  Individual  to  whom  It 
pertains. 

1814.5  Procedures  for  requests  for  access  to 

specific  records  pertaining  to  In¬ 
dividuals.  and  fees  charged  for 
reproduction. 

1814.6  Requests  for  and  agency  review,  In¬ 

cluding  appeal,  of  requests  for 
correction  or  amendment  of  a 
record. 

1814.7  Accounting  for  and  Informing  about 

disclosures. 

1814.8  Mailing  lists  and  names  and  ad¬ 

dresses. 

1814.9  Exemptions. 

1814.10  DCPA  contractors. 

Authority:  Pub.  L.  93-579:  32  CFR,  Part 
286a,  60  U.S.C.  App.  2251-2297,  E.O.  10962, 
26  FR  6577;  DoD  Directive  5105.43,  37  FR 
18636. 

§  1814.1  Purpose  and  scope. 

(a)  The  regulation  in  this  part  imple¬ 
ments  for  DCPA  that  part  of  the  De¬ 
partment  of  Defense  regulation  (32  CFR 
Part  286a)  providing  for  promulgation 
of  published  regulations  by  components 
in  accordance  with  subchapter  II  of 
Chapter  5  of  Title  5.  United  States  Code. 
This  regulation  sets  forth: 

(1)  The  procedures  whereby  an  indi¬ 
vidual  can  be  notified  in  response  to  his 
or  her  request  if  any  system  of  DCPA 
records  specified  by  the  individual  con¬ 
tains  a  record  pertaining  to  self. 

(2)  The  requirements  for  verifying  the 
identity  of  an  individual  who  requests 
his  or  her  record  or  information  pertain¬ 
ing  to  self  prior  to  making  the  record  or 
information  available  to  the  individual. 

(3)  The  procedures  for  granting  an 
individual  who  so  requests  access  to  his 
or  her  record  or  information  pertaining 
to  self. 

(4)  The  procedures  for  reviewing  a  re¬ 
quest  from  an  individual  who  asks  for 
the  amendment  of  any  record  or  infor¬ 
mation  pertaining  to  self,  for  making  a 
determination  on  the  request,  and  for 
an  appeal  of  an  initial  adverse  determi¬ 
nation. 

(5)  The  conditions  under  which  dis¬ 
closure  of  personal  information  may  be 
made. 

(6)  Exemptions  of  certain  records 
within  systems  of  records  from  certain 
of  the  requirements  of  the  Privacy  Act. 

(b)  This  regulation  specifies  the 
method  by  which  an  individual,  as  de¬ 
fined  herein,  can  obtain  information 
about  DCPA  records  pertaining  to  said 
individual.  The  procedures  described 
herein  are  not  to  be  used  to  obtain  in¬ 
formation  about  another  person.  Any 
requests  for  information  about  another 
person  will,  as  appropriate,  be  processed 
under  the  DCPA  Freedom  of  Informa¬ 
tion  Act  Regulation  set  out  in  Part  1813 
of  this  Title. 

(c)  An  employee  or  a  former  employee 
of  DCPA  who  seeks  notification  about, 
or  access  to,  or  amendment  of  personnel 


records  pertaining  to  himself  shall,  where 
such  are  applicable,  use  the  procedures 
set  out  in  Parts  293  and  297  of  Title  5 
of  the  Code  of  Federal  Regulations, 
rather  than  the  provisions  of  this  part. 
The  Civil  Service  Commission  (CSC)  has 
basic  responsibility  for  establishing  pol¬ 
icies,  and  access  and  disclosure  pro¬ 
cedures  and  for  publishing  notices  for 
those  systems  of  personnel  records  which 
the  CSC  requires  or  authorizes  govern¬ 
ment  agencies  to  maintain.  If  a  record  or 
information  is  within  a  system  of  rec¬ 
ords  covered  by  Parts  293  or  297  of 
Title  5,  Code  of  Federal  Regulations, 
DCPA  of  the  Director,  Personnel  and 
Employment  Services,  Washington,  Of¬ 
fice  of  Secretary  of  the  Army  who  serves 
as  DCPA  personnel  officer,  will  apply  the 
CSC  guidance  and  regulation,  including 
except  as  specifically  provided  in  section 
6  of  this  part,  using  the  procedures  set 
out  therein  which  may  be  different  from 
those  in  this  regulation. 

(d)  This  is  an  implementing  regula¬ 
tion.  Generally,  this  part  does  not  repeat 
restrictions  or  limitations  placed  on 
agencies  or  components  thereof  as  set 
forth  in  the  Act  or  in  the  DoD  regulation. 
It  does  not  set  out  matters  relating  to  in¬ 
ternal  management  of  a  component  and 
which  do  not  directly  affect  a  member  of 
the  public. 

§  1814.2  Policy. 

The  policy  of  DCPA  is  to:  (a)  Pre¬ 
serve  the  personal  privacy  of  individuals, 
permitting  an  individual  to  know  what 
records  pertaining  to  him  are  collected, 
maintained,  used,  or  disseminated  in  the 
Department  of  Defense,  and  to  have  ac¬ 
cess  to  and  have  a  comprehensible  copy 
made  of  all  or  any  portion  of  such  rec¬ 
ords,  and  to  correct  or  amend  such  rec¬ 
ords. 

(b)  Collect,  maintain,  use,  or  dissemi¬ 
nate  any  record  of  identifiable  personal 
information  in  a  manner  that  assures 
that  such  action  is  relevant  to  the  DCPA 
mission  and  fs  for  a  necessary  and  lawful 
purpose:  that  the  information  is  timely, 
complete  and  accurate  for  its  intended 
use;  and  that  adequate  safeguards  are 
provided  to  prevent  misuse  of  such  in¬ 
formation.  TTiese  safeguards  will  be  de¬ 
veloped  in  internal  DCPA  instructions  to 
staff. 

(c)  Collect,  to  the  greatest  extent 
practical,  personal  information  directly 
from  the  individual  when  that  infor¬ 
mation  may  result  in  adverse  determi¬ 
nations  about  an  individual’s  rights, 
benefits  and  privileges  under  Federal 
programs.  To  this  end,  DCPA  will  devise 
internal  procedures  in  connection  with 
its  forms  and  reports  management  activ¬ 
ities  to  carry  out  the  policy.  These  pro¬ 
cedures  will  meet  all  of  the  requirements 
of  the  DoD  regulation. 

(d)  Not  request  an  individual  to  dis¬ 
close  his  or  her  social  security  number 
unless  some  other  agency  or  some  other 
DoD  component  (such  as  the  Department 
of  the  Treasury,  or  the  Finance  and  Ac¬ 
counts  Office,  Department  of  the  Army) 
requires  DCPA  to  obtain  such  number. 
The  authority  for  such  a  request,  the 


routine  uses,  etc.,  will  be  those  specified 
by  the  other  agency  or  component. 

(e)  Evaluate,  in  accordance  with  in¬ 
ternal  procedures  established  pursuant 
to  the  DoD  regulation,  categories  of  in¬ 
formation  in  systems  of  records,  and  dis¬ 
continue  such  systems  where  mainte¬ 
nance  does  not  seem  reasonably  justifi¬ 
able. 

(f)  Publish  in  the  Federal  Register 
systems  notices  and  changes  thereto  in 
accordance  with  the  procedures  speci¬ 
fied  in  the  DoD  regulation  and  Office  of 
Management  and  Budget  guidelines  and 
circulars.  These  systems  notices  will  ap¬ 
pear  in  the  annual  compilation  published 
by  the  Office  of  the  Federal  Register. 

(g)  Establish,  by  internal  instruction. 
Instructions  to  staff  regarding  rules  of 
conduct. 

§  1814.3  Definitions. 

As  used  herein,  the  following  terms 
shall  have  the  following  meanings: 

(a)  Individual.  A  citizen  of  the  United 
States  or  an  alien  lawfully  admitted  for 
permanent  residence.  A  legal  guardian 
or  the  parent  of  a  minor  has  the  same 
rights  as  the  individual  and  may  act  on 
behalf  of  the  individual. 

(b)  Maintain  (records  on  individuals) . 
Collect,  use,  or  disseminate. 

(c)  Record.  Any  item,  collection,  or 
grouping  of  information  about  an  indi¬ 
vidual  that  is  maintained  by  DCPA  in¬ 
cluding,  but  not  limited  to,  his  educa¬ 
tion,  financial  transactions,  medical  his¬ 
tory,  and  criminal  or  employment  his¬ 
tory  and  that  contains  his  name,  or  the 
identifying  number,  symbol,  or  other 
identifying  particular  assigned  to  the  in¬ 
dividual,  such  as  a  finger  or  voice  print 
or  photograph. 

(d)  System  of  records.  A  group  of  any 
records  under  the  control  of  DCPA  from 
which  information  is  retrieved  by  the 
name  of  an  individual  or  by  some  iden¬ 
tifying  number,  symbol  or  other  identify¬ 
ing  particular  assigned  to  the  individual. 

(e)  Routine  use.  With  respect  to  the 
disclosure  of  a  record,  or  the  use  of  such 
record  for  a  purpose  which  is  compatible 
with  the  purpose  for  which  it  was  col¬ 
lected,  routine  use  encompasses  not  only 
common  or  ordinary  uses,  but  also  all 
the  proper  and  necessary  uses  of  the 
record,  even  if  such  use  occurs  infre¬ 
quently. 

(f)  DCPA  means  the  Defense  Civil 
Preparedness  Agency,  a  component  of  the 
Department  of  Defense. 

(g)  Director  means  the  Director, 
DCPA. 

(h)  Deputy  Director  means  the  Deputy 
Director,  DCPA. 

(i)  Act  means  the  Privacy  Act  of  1974 
(5  U.S.C.  552a). 

(j)  DoD  regulation  means  the  Depart¬ 
ment  of  Defense  regulation  entitled 
“Personal  Privacy  and  Rights  of  Indi¬ 
viduals  Regarding  Their  Personnel  Rec¬ 
ords”  (32  CFR  Part  286a) . 

(k)  CSC  means  the  United  States  Civil 
Service  Commission. 

(l)  Systems  notices  means  a  notice 
published  in  the  Federal  Register  of  the 
existence  of  a  system  of  records  main¬ 
tained  by  DCPA.  Such  notice  is  one  that 
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complies  with  the  requirements  of  OMB 
circulars  and  the  DoD  regulation. 

cm)  OMB  means  the  Office  of  Man¬ 
agement  and  Budget. 

§  1814.4  Disclosure  of  record  to  per¬ 
son  other  than  the  individual  to 
whom  it  pertains. 

(a(  No  record  contained  in  a  system 
of  records  maintained  within  the  De¬ 
partment  of  Defense  shall  be  disclosed 
by  any  means  of  communication  to  any 
person,  or  to  any  agency  outside  the  De¬ 
partment  of  Defense,  except  pursuant  to 
a  written  request  by,  or  with  the  prior 
written  consent  of,  the  individual  to 
whom  the  record  pertains,  unless  dis¬ 
closure  of  the  record  will  be: 

(1)  To  those  officials  and  employees 
of  the  Department  of  Defense  who  have 
a  need  for  the  record  in  the  performance 
of  their  duties  and  the  use  is  compatible 
with  the  purpose  for  which  the  record 
is  maintained.  This  includes,  for  example, 
transfer  of  information  between  DCPA 
and  the  Office  of  the  Secretary  of  the 
Army  which  performs  certain  services 
in  connection  with  DCPA  personnel. 

(2)  Required  to  be  disclosed  to  a  mem¬ 
ber  of  the  public  by  the  Freedom  of  In¬ 
formation  Act  (5  U.S.C.  552). 

<3)  For  a  routine  use  as  defined  in 
$  1814.3(e)  of  this  part. 

(4)  )  To  the  Bureau  of  the  Census  for 
purposes  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity  au¬ 
thorized  by  law. 

(5)  To  a  recipient  who  has  provided 
DCPA  with  advance  adequate  written  as¬ 
surance  that  (i)  the  record  will  be  used 
solely  as  a  statistical,  research  or  report¬ 
ing  record:  (ii)  the  record  is  to  be  trans¬ 
ferred  in  a  form  that  is  not  individually 
identifiable  (i.e.,  the  identity  of  the  indi¬ 
vidual  cannot  be  determined  by  combin¬ 
ing  various  statistical  records) ;  and  (iii) 
will  not  be  used  to  make  any  decisions 
about  the  rights,  benefits  or  entitlements 
of  an  individual. 

(6)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has  suffi¬ 
cient  historical  or  other  value  to  warrant 
its  continued  preservation  by  the  United 
States  Government,  or  for  evaluation  by 
the  Administrator  of  General  Services  or 
his  designee  to  determine  whether  the 
record  has  such  value. 

(7)  To  another  agency  or  to  an  instru¬ 
mentality  of  any  governmental  jurisdic¬ 
tion  within  or  under  the  control  of  the 
United  States  for  a  civil  or  criminal  law 
enforcement  activity  if  the  activity  is  au¬ 
thorized  by  law,  and  if  the  head  of  the 
agency  or  Instrumentality  has  made  a 
written  request  to  the  Director  specifying 
the  particular  portion  desired  and  the 
law  enforcement  activity  for  which  the 
record  is  sought.  Blanket  requests  for  all 
records  pertaining  to  an  individual  will 
not  be  accepted.  A  record  may  also  be  dis¬ 
closed  to  a  law  enforcement  agency  at 
the  initiative  of  the  Director  when  crim¬ 
inal  conduct  is  suspected,  provided  that 
such  disclosure  has  been  established  in 
advance  as  a  “routine  use.” 

(8)  To  a  person  pursuant  to  a  showing 
of  compelling  circumstances  affecting  the 


health  or  safety  of  an  individual  if  upon 
such  disclosure,  notification  is  trans¬ 
mitted  to  the  last  known  address  of  the 
individual  to  whom  the  record  pertains. 

(9)  To  either  House  of  Congress,  or,  to 
the  extent  of  matter  within  its  Jurisdic¬ 
tion,  any  committee  or  subcommittee 
thereof,  or  any  joint  committee.  This  does 
not  authorize  the  disclosure  of  any  record 
subject  to  this  part  to  members  of  Con¬ 
gress  acting  in  their  individual  capacities 
or  on  behalf  of  their  constituents,  unless 
the  individual  consents. 

(10)  To  the  Comptroller  General,  or 
any  of  his  authorized  representatives, 
in  the  course  of  the  performance  of  the 
duties  of  the  General  Accounting,  Office. 

(11)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction. 

§  1814.5  Procedures  for  requests  for 
access  to  specific  records  pertaining 
to  individuals,  and  fees  charged  for 
reproduction. 

(a)  The  first  step  in  gaining  access  to 
personal  information  is  for  an  individual 
to  request  notification  if  he  does  not 
know  whether  or  not  DCPA  maintains 
any  information  pertaining  to  him.  He 
may,  however,  request  access  to  a  specific 
named  record  without  requesting  a  noti¬ 
fication.  Such  a  request  for  notification 
should  specify  which  system  of  DCPA 
records  as  set  out  in  the  systems  notices 
the  individual  believes  contains  informa¬ 
tion  pertaining  to  himself.  If  such  a  re¬ 
quest  for  notification  is  made,  DCPA  will 
inform  him  whether  or  not  said  specified 
system  of  records  contain  any  records 
about  the  requester.  He  may  then  request 
permission  to  review  any  of  these  records. 

(b)  A  request  for  notification  or  a  re¬ 
quest  for  access  may  be  made  in  person 
to  the  Assistant  Director  for  Administra¬ 
tive  Services,  Room  1D511,  The  Penta¬ 
gon,  Washington,  DC.  Requests  made  by 
mail  must  be  addressed  to  the  Defense 
Civil  Preparedness  Agency,  Attention: 
Assistant  Director  for  Administrative 
Services.  Washington,  DC  20301. 

(c)  Subject  to  the  procedures  in  this 
section,  and  unless  the  record  in  the  sys¬ 
tem  of  records  described  above  is  exempt 
or  need  not  be  disclosed  under  the  pro¬ 
visions  of  the  Act,  the  DoD  regulation  or 
this  regulation,  the  individual  shall  be 
permitted  to  review  the  record  and  to 
obtain  a  copy  in  a  form  comprehensible 
to  him. 

(d)  Requests  in  person  may  be  made 
only  at  the  office  of  the  DCPA  official 
mentioned  in  paragraph  (b)  of  this  sec¬ 
tion.  These  requests  must  be  made  be¬ 
tween  the  hours  of  9  a.m.  and  4  p.m. 
Monday  through  Fridays,  holidays  ex¬ 
cepted.  Persons  not  authorized  access 
to  the  Pentagon  will  be  escorted  to  this 
office  and  will  not  be  permitted  to  visit 
other  areas  of  the  building.  If  the  partic¬ 
ular  record  is  not  immediately  available 
at  that  office,  mutually  agreeable 
arrangements  will  be  made  to  make  it 
so  available  and  the  requester  advised 
as  to  the  time  the  record  will  be  fur¬ 
nished.  Subject  to  the  provisions  of  this 
section,  an  individual  who  so  desires  may 
be  accompanied  by  a  person  selected  by 
him. 


(e)  Requests  by  mail  will  be  addressed 
to  the  address  set  in  paragraph  (b)  of 
this  section. 

(f )  The  only  charge  for  a  copy  of  a  rec¬ 
ord  will  be  that  for  the  cost  (as  set  out 
in  Appendix  B  of  Part  1813  of  this  Title) 
of  reproducing  the  record.  No  charge  is 
made  for  search  or  for  costs  connected 
with  deleting  material  not  provided  the 
individual.  See  paragraph  (k)  of  this 
section.  If,  under  said  Appendix  B,  the 
fee  would  amount  to  less  than  $10,  such 
a  fee  is  waived. 

(g)  If  a  requested  record  is  one  that 
would  be  made  available  under  the  Free¬ 
dom  of  Information  Act  (5  U.S.C.  552), 
no  verification  of  identity  is  required. 

(h)  An  individual  who  asks  in  person 
for  his  record  will  be  asked  to  furnish 
some  acceptable  identification,  such  as 
driver’s  license  or  an  employing  office 
identification  card  or  for  some  verifiable 
verbal  information.  Such  a  request  is 
made  solely  for  verification  of  identity. 

(i)  An  individual  who  asks  for  his  rec¬ 
ord  by  mail  shall,  for  verification  of  iden¬ 
tity,  furnish  an  item  of  information 
which  can  be  used  for  such  verification. 
A  birth  date  is  the  preferred  form  of 
data.  If  information  in  the  record  is  ex¬ 
tremely  sensitive,  the  individual  may  be 
asked  to  submit  a  not:  *ized  statement 
of  identity. 

(j)  DCPA  records  which  have  been  ac¬ 
cepted  by  the  Administrator  of  General 
Services  or  his  designee  for  storage, 
processing  and  servicing  in  records  cen¬ 
ters  remain  DCPA  records.  Even  though 
a  record  may  be  located  at  one  of  such 
centers,  the  request  for  the  record  should 
be  made  in  accordance  with  this  section. 
DCPA  will  obtain  the  record  from  the 
Administrator  or  his  designee. 

(k)  Access  to  a  record  or  a  copy  thereof 
will  not  bo  denied  solely  because  the  rec¬ 
ord’s  physical  presence  is  not  readily 
available  (i.e.,  on  magnetic  tape)  or  be¬ 
cause  the  context  of  the  record  may  dis¬ 
close  sensitive  information  about  another 
individual.  To  protect  the  personal  pri¬ 
vacy  of  other  individuals  who  may  be 
identified  in  a  record,  an  extract  shall 
be  prepared  deleting  only  that  informa¬ 
tion  which  would  not  be  released  to  the 
requesting  individual  under  the  Freedom 
of  Information  Act. 

(l)  This  regulation  does  not  entitle  an 
individual  to  have  access  to  any  informa¬ 
tion  compiled  in  reasonable  anticipation 
of  a  civil  action  or  proceeding. 

(m)  Copies  of  investigatory  records 
compiled  by  any  investigative  organiza¬ 
tion,  but  in  the  temporary  custody  of 
an  element  requesting  the  record  for 
purposes  of  adjudication  or  other  per¬ 
sonnel  action,  are  the  records  of  the 
originating  investigative  organization. 
Individuals  seeking  access  to  such  rec¬ 
ords  shall  be  directed  to  the  originating 
investigative  organization  and  should  be 
instructed  to  direct  all  requests  submit¬ 
ted  under  the  Privacy  Act  of  1974  to  that 
organization.  Records  concerning  the  ad¬ 
judication,  or  other  personnel  actions 
based  on  the  investigative  records,  orig¬ 
inated  by  the  organization  using  the  in¬ 
vestigation,  are  the  records  of  the  using 
organization  which  shall  respond  to  all 
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other  requests  under  the  Privacy  Act  of 
1974  concerning  them. 

§  1814.6  Requests  for  and  agency  re¬ 
view,  including  appeal,  of  requests 
for  correction  or  amendment  of  a 
record. 

(a)  An  individual  may  request,  either 
in  person  or  by  mail,  that  a  record  in  a 
specified  system  of  records  be  amended. 
Such  request  shal!  be  in  writing.  No 
specific  form  is  required.  A  request  shall 
contain,  as  a  minimum,  identifying  in¬ 
formation  to  locate  the  record,  a  descrip¬ 
tion  of  the  items  to  be  amended  and  the 
reason  amendment  is  being  requested. 
The  system  of  records  of  which  the  rec¬ 
ord  is  a  part  should  be  specified.  If  the  re¬ 
quest  cannot  be  processed  because  of  l°ck 
of  specificity  or  information,  the  indi¬ 
vidual  may  be  askec  to  clarify  the  request 
or  to  submit  further  information.  No 
specific  form  is  required  for  an  amend¬ 
ment.  An  individual  shall  be  required  to 
provide  verification  of  identity  as  pre¬ 
scribed  in  section  5  of  this  part  to  assure 
that  the  requester  is  seeking  to  amend 
records  pertaining  to  him  and  not  in¬ 
advertently  or  intentionally  the  records 
of  another  Individual. 

(b)  The  request  for  amendment  shall 
be  addressed  to  the  Assistant  Director 
for  Administrative  Services  (see  §  1814.5 
(b)  of  this  part)  who  shall  process  the 
request  for  decision  by  the  Deputy 
Director. 

(c)  A  request  to  amend  a  personnel 
record,  submitted  in  accordance  with  the 
CSC  procedures,  will  be  processed 
through  the  Director,  Personnel  and  Em¬ 
ployment  Services,  Washington,  for  deci¬ 
sion  by  the  Deputy  Director. 

(d)  Unless  the  request  is  approved  or 
denied  within  the  ten  days,  and  the  in¬ 
dividual  advised,  a  written  acknowledg¬ 
ment  of  receipt  of  a  request  for  amend¬ 
ment  of  record  shall  be  provided  to  the 
individual  within  ten  working  days  (ex¬ 
cluding  Saturdays,  Sundays,  and  legal 
public  holidays)  after  receipt  by  the 
proper  office.  The  acknowledgment  will 
clearly  identify  the  request  and  advise 
the  individual  when  he  may  expect  to 
be  informed  of  action  taken  on  the  re¬ 
quest.  Whenever  practicable,  the  decision 
shall  be  made  within  30  working  days. 
For  requests  presented  in  person,  written 
acknowledgment  may  be  provided  at 
the  time  the  request  is  presented. 

(e)  If  the  Deputy  Director  agrees  with 
any  portion  or  all  of  the  individual’s  re¬ 
quest  to  amend  a  record,  the  Deputy  Di¬ 
rector  shall  promptly  advise  the  individ¬ 
ual  and  the  record  will  be  amended  ac¬ 
cordingly.  If  a  disclosure  accounting  has 
been  made,  all  previous  recipients  of  the 

^record  will  be  advised  that  the  amend¬ 
ment  has  been  made  and  of  the  sub¬ 
stance  of  the  correction. 

(f)  If  the  Deputy  Director  disagrees 
with  all  or  any  portion  of  a  request  to 
amend  a  record,  the  Deputy  Director 
shall: 

(1)  Advise  the  individual  of  the  re¬ 
fusal  and  the  reasons  therefor; 

(2)  Inform  the  individual  that  a  re¬ 
quest  may  be  made  for  further  review 
by  the  Director,  and 


(3)  Describe  the  procedures  for  re¬ 
questing  such  a  review. 

(g)  Upon  request  in  writing  by  the 
individual,  the  Director  shall  make  a 
review  of  the  initial  determination.  Such 
a  request  shall  be  addressed  to  the  Di¬ 
rector,  and  shall  specify  that  part  of 
the  Deputy  Director’s  initial  decision 
with  which  the  individual  disagrees  and 
the  requested  modification  to  the  deci¬ 
sion.  The  request  shall  be  mailed  to,  or 
delivered  as  described  in  §  1845.5(b)  of 
this  part. 

(h)  If,  after  conducting  the  review, 
the  Director  also  refuses  to  amend  the 
record  in  accordance  with  the  individ¬ 
ual’s  request,  the  individual  shall  be 
notified : 

(1)  Of  the  refusal  and  the  reasons 
therefor; 

(2)  Of  the  right  to  file  a  concise  state¬ 
ment  of  reasons  for  disagreeing  with  the 
decision; 

(3)  Of  the  procedures  for  filing  a 
statement  of  disagreement:  and  that 
such  statement  will  be  made  available  to 
anyone  to  whom  the  record  is  sub¬ 
sequently  disclosed; 

(4)  That  prior  recipients  of  the  dis¬ 
puted  record  will  be  provided  a  copy  of 
the  statement  of  disagreement  to  the  ex¬ 
tent  that  an  accounting  of  disclosures  is 
maintained:  and 

(5)  Of  the  right  to  seek  judicial  review 
of  the  refusal  to  amend  a  record. 

(i)  If  the  Director  determines  that  the 
record  should  be  amended  in  accordance 
with  the  request,  the  record  will  be 
amended  and  the  individual,  and  previ¬ 
ous  recipients,  where  an  accounting  of 
disclosure  has  been  maintained,  will  be 
advised. 

(j)  A  final  determination  on  the  re¬ 
quest  for  a  review  of  an  initial  refusal 
to  amend  a  record  must  be  completed 
within  30  working  days  after  receipt  un¬ 
less  the  Director  determines  that  a  fair 
and  equitable  review  cannot  be  com¬ 
pleted  in  that  time.  If  additional  time  is 
required,  the  individual  shall  be  in¬ 
formed  in  writing  of  the  reasons  for  the 
delay  and  of  the  approximate  date  on 
which  the  review  is  expected  to  be  com¬ 
pleted. 

(k)  When  an  individual  files  a  state¬ 
ment  of  dispute,  the  record  will  be  clearly 
annotated  so  that  the  dispute  is  apparent 
to  anyone  who  may  subsequently  grant 
access  to,  use  or  disclose  the  record.  The 
notation  itself  shall  be  integral  to  the 
record.  Where  an  accounting  of  dis¬ 
closure  has  been  made,  DCPA  shall  ad¬ 
vise  previous  recipients  that  the  record 
has  been  disputed  and  shall  provide  a 
copy  of  the  individual’s  statement. 

(l)  A  brief  summary  of  the  reasons  for 
not  making  an  amendment  may  be  in¬ 
cluded  when  disclosing  disputed  infor¬ 
mation.  Summaries  normally  will  be 
limited  to  the  reasons  stated  to  the  in¬ 
dividual.  The  summary  will  be  treated  as 
part  of  the  individual’s  record:  however, 
it  will  not  be  subject  to  the  amendment 
procedures. 

§  1814.7  Accounting  for  and  informing 
about  disclosures. 

(a)  Except  for  disclosures  made  pur¬ 
suant  to  {  1814.4(a)  (1)  and  (2),  except 


for  a  disclosure  for  investigative  pur¬ 
poses  under  §  1814.4(a)  (7),  and  except 
for  disclosure  of  records,  if  any,  exempt 
from  the  accounting  requirement  under 
section  9,  DCPA  will  maintain  an  ac¬ 
curate  accounting  of  the  date,  nature 
and  purpose  of  each  disclosure  of  a  rec¬ 
ord  in  a  system  of  records  to  any  per¬ 
son  or  agency  outside  the  Department  of 
Defense,  and  make  such  accounting  rec¬ 
ord  available  to  the  individual  to  whom  it 
pertains  upon  his  request.  Such  a  request 
shall  be  submitted  in  the  same  manner 
as  a  request  to  amend  a  record,  as  speci¬ 
fied  in  §  1814.5(b). 

(b)  DCPA  will  make  reasonable  ef¬ 
forts  to  notify  an  individual  when  any 
record  which  pertains  to  him  is  disclosed 
to  any  person  or  agency  under  compul¬ 
sory  legal  process. 

§  1814.8  Mailing  lists  and  names  and 
addresses. 

(a)  An  individual’s  name  and  address 
will  not  be  sold  or  rented  by  DCPA  un¬ 
less  such  action  is  specifically  authorized 
by  law.  This  provision  shall  not  be  con¬ 
strued  to  require  the  withholding  of 
names  and  addresses  otherwise  per¬ 
mitted  to  be  made  public. 

(b)  Except  where  specifically  set  out 
as  a  routine  use  in  the  DCPA  systems 
notices,  lists  or  compilation  of  names 
and  home  addresses,  or  single  home  ad¬ 
dresses  will  not  be  disclosed  without  the 
consent  of  the  individual  involved,  to 
the  public  including,  but  not  limited  to, 
individual  congressmen,  creditors,  and 
commercial  and  financial  institutions. 
Requests  for  home  addresses  may  be  re¬ 
ferred  to  the  last  known  address  of  the 
individual  for  reply  at  his  discretion  and 
the  requester  will  be  notified  accordingly. 
This  prohibition  does  not  apply  to  direc¬ 
tories  and  similar  lists  of  civil  prepared¬ 
ness  officials,  persons  qualified  to  per¬ 
form  civil  preparedness  tasks  and  skills 
and  the  like  which  are  disseminated  for 
a  civil  defense  purpose:  it  may  also  be 
waived  by  the  Director  or  Deputy  Direc¬ 
tor  when  circumstances  of  a  case  indi¬ 
cate  compelling  and  overriding  interests. 

§  1814.9  Exemptions. 

(a)  Pursuant  to  subsection  3 (k)  (1)  of 
the  Act,  those  records  in  any  of  the  sys¬ 
tems  of  records  maintained  by  DCPA 
which  contain  any  information  properly 
classified  under  Executive  Order  11652 
and  which  are  required  by  the  Executive 
Order  to  be  kept  secret  in  the  national 
defense  or  foreign  policy  are  exempt 
from  section  3  (d)  and  (f)  of  the  Act. 
This  exemption  which  conceivably  could 
be  applicable  to  individual  records  in  any 
of  the  records  systems  for  which  DCPA 
has  published  a  systems  notice  is  neces¬ 
sary  because  certain  records  in  systems 
not  specifically  designated  could  contain 
isolated  items  of  information  which  have 
been  properly  classified  and  which  can¬ 
not  be  disclosed. 

(b)  Pursuant  to  subsection  3(k)  (2)  of 
the  Act,  those  records  in  any  of  the  sys¬ 
tems  of  records  for  which  DCPA  has 
published  systems  notices  which  contain 
investigatory  material  compiled  for  law 
enforcement  purposes  are  exempt  from 
the  provisions  of  section  3  (c)(3),  (d). 
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(e)  (4)  (I),  and  (f)  of  the  Act.  This  ex¬ 
emption  applies  to  records  in  the  follow¬ 
ing  systems  of  records  for  which  systems 
notices  have  been  published  on  Au¬ 
gust  13,  1975  in  the  Federal  Register. 

FEA  3-1,  Civil  Rights  complaint  and  com¬ 
pliance  files. 

T  EG  5,  Interest — Conflict  review. 

I  EG  7-1,  Claims  (Litigation) — Employees. 
LEG  7-2,  Claims  (Litigation) — Other  than 
employees. 

LEG  8-1,  Enforcement,  compliance  and  su¬ 
pervision  of  DCPA  employees. 

LEG  8-2,  Enforcement  (compliance) — In¬ 
dividuals  other  than  DCPA  employees. 
PER  6,  Equal  Employment  Opportunity  dis¬ 
crimination  complaint  files. 

PER  6A,  Handicapped  employees  and  handi¬ 
capped  veterans. 

PER  7,  General  personnel. 

(c)  DCPA  will  not  deny  an  individual 
access  to  information  which  has  been 
used  to  deny  him  a  right,  benefit  or 
privilege. 

§  1814.10  DCPA  contractors. 

(a)  Where  DCPA  hires  a  contractor 
to  maintain  or  to  participate  in  main¬ 
taining  a  system  of  records  as  defined  in 
5  1814.3,  the  contractor  shall  be  subject 
to  the  requirements  of  the  Act,  the  DoD 
regulation  and  this  part,  including 
§§  1814.4,  1814  5  and  1814.6.  Only  for 
purposes  of  subsection  3(i)  of  the  Act 
entitled  “Criminal  Penalties,”  a  contrac¬ 
tor,  or  an  employee  of  a  contractor,  shall 
be  considered  to  be  an  employee  of 
DCPA. 

(b)  Educational  institutions  which 
maintain  systems  of  records  as  defined 
in  5  1814.3  in  connection  with  a  DCPA 
contract  are  not  subject  to  the  require¬ 
ments  of  this  part  if  such  systems  of 
records  are  integrated  into  the  educa¬ 
tional  institutions  regular  systems  of 
records.  Thus  student  records  main¬ 
tained  by  the  institution  together  with 
other  student  records  of  the  institution 
are  not  subject  to  this  part  by  virtue  of 
the  fact  that  DCPA  paid  the  tuition  for 
such  student  or  otherwise  hired  the  in¬ 
stitution  to  conduct  the  training. 

John  E.  Davis, 

Director,  DCPA. 

Maurice  W.  Roche, 
Director  Correspondence  and 
Directives  OASD  ( Comptrol¬ 
ler . 

August  11,  1975. 
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Defense  Communications  Agency 
[32  CFR  Part  287a] 

PERSONAL  PRIVACY  AND  RIGHTS  OF  IN¬ 
DIVIDUALS  REGARDING  THEIR  PER¬ 
SONAL  RECORDS 

Proposed  Procedure  and  Requirements 

Pursuant  to  the  provisions  of  Pub.  L. 
93-579,  enacted  31  December  1974,  no¬ 
tice  is  hereby  given  of  the  proposed  pub¬ 
lication  of  Defense  Communications 
Agency  Instruction  210-225-2  imple¬ 
menting  5  U.S.C.  552a,  the  Privacy  Act 
of  1974.  This  Part  287a  provides  overall 
guidance  to  Defense  Communications 
Agency  (DCA)  organizations  on  how  they 
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should  respond  to  requests  from  indi¬ 
viduals  for  records  in  a  records  system 
pertaining  to  an  individual.  This  Part 
287a  also  implements  the  Department  of 
Defense  Directive,  32  CFR  286a.  The 
Department  of  Defense  Directive,  32 
CFR  286a,  applies  to  all  Department  of 
Defense  components,  and  Defense  Com¬ 
munications  Agency  Instruction  in  this 
Part  287a  applies  to  Headquarters,  De¬ 
fense  Communications  Agency,  and  De¬ 
fense  Communications  Agency  (DCA) 
field  activities.  It  is  proposed  this  regu¬ 
lation  become  effective  27  September 
1975.  However,  public  comments  and  rec¬ 
ommendations  submitted  to  Defense 
Communications  Agency,  ATTN:  Code 
105,  Washington.  D.C.  20305  on  or  before 
September  25,  1975,  will  be  considered  in 
determining  the  need  for  modification  of 
the  regulation. 

The  following  DCA  document  imple¬ 
menting  Pub.  L.  93-579  is  proposed  as 
set  forth  below: 

PART  287a— PERSONAL  PRIVACY  AND 
RIGHTS  OF  INDIVIDUALS  REGARDING 
THEIR  PERSONAL  RECORDS 

Sec. 

287a. 1  Purpose. 

287a. 2  Applicability. 

287a.3  Authority. 

287a. 4  Definitions. 

287a. 5  Policy. 

287a. 6  Procedures  and  responsibilities. 

287a.7  Questions. 

Authority:  Pub.  L.  93-579,  5  U.S.C.  652a. 

§  287a. 1  Purpose. 

This  Part  delineates  responsibility  and 
provides  guidance  for  the  implementa¬ 
tion  of  Pub.  L.  93-579  (Privacy  Act  of 
1974). 

§  287a. 2  Applicability. 

This  Port  applies  to  Headquarters, 
DCA  and  DCA  field  activities. 

§  287a. 3  Authority. 

This  Part  is  published  in  accordance 
with  the  authority  contained  in  32  CFR 
286a,  August  1975. 

§  287a. 4  Definitions. 

Add  to  the  definitions  contained  in  32 
CFR  286a.6  the  following: 

System  Manager:  The  DCA  official  who 
is  responsible  for  policies  and  procedures 
governing  a  DCA  System  of  Record.  His 
title  and  duty  address  will  be  found  in 
the  paragraph  entitled  Sysmanager 
in  DCA’s  Record  System  Notices  which 
are  published  in  the  Federal  Register  in 
compliance  with  provisions  of  the  Pri¬ 
vacy  Act  of  1974. 

§  287a. 5  Policy. 

It  is  the  policy  of  DCA: 

(a)  To  preserve  the  personal  privacy  of 
Individuals,  to  permit  an  Individual  to 
know  what  records  exist  pertaining  to 
him  in  the  DCA,  and  to  have  access  to 
and  have  a  copy  made  of  all  or  any  por¬ 
tion  of  such  records  and  to  correct  or 
amend  such  records. 

(b)  To  collect,  maintain,  use,  or  dis¬ 
seminate  any  record  of  identifiable  per¬ 
sonal  information  in  a  manner  that  as¬ 
sures  that  such  action  is  for  a  necessary 
and  lawful  purpose;  that  the  informa¬ 


tion  is  timely  and  accurate  for  its  in¬ 
tended  use;  and  that  adequate  safe¬ 
guards  are  provided  to  prevent  misuse 
of  such  information. 

§  287a. 6  Procedures  and  responsibili¬ 
ties. 

(a)  The  Counsel,  DCA,  is  hereby  des¬ 
ignated  the  Privacy  Act  Officer  for  DCA 
and  is  responsible  for  insuring  that  an 
internal  DCA  Privacy  Program  is  estab¬ 
lished  and  maintained.  He  will  also  in¬ 
sure  that  all  echelons  of  DCA  effectively 
comply  with  and  implement  32  CFR 
286a. 

(b)  The  Civilian  Assistant  to  the  Chief 
of  Staff  will  be  responsible  for  the  annual 
reporting  requirements  contained  in  32 
CFR  286a. 5. 

(c)  DCA  System  Managers  and  other 
appropriate  DCA  officials  will: 

(1)  Insure  compliance  with  the  pro¬ 
visions  of  32  CFR  286a. 9. 

(2)  Comply  with  the  provisions  of  32 
CFR  286a.ll.  In  this  area  the  Assistant 
to  the  Director  for  Administration  will 
provide  assistance. 

(3)  Adhere  to  the  following: 

(i)  Within  DCA,  the  System  Manager 
of  any  record  system  will  assure  that 
records  pertaining  to  an  individual  will 
be  disposed,  upon  request,  to  the  indi¬ 
vidual  to  whom  the  record  pertains.  The 
individual  need  not  state  a  reason  or 
otherwise  justify  the  need  to  gain  access. 
A  person  of  the  individual’s  choosing 
may  accompany  the  individual  when  the 
record  is  disclosed.  The  System  Manager 
may  require  the  individual  to  furnish  a 
written  statement  authorizing  discussion 
of  the  individual’s  records  in  the  presence 
of  the  accompanying  person.  If  re¬ 
quested,  the  System  Manager  will  have  a 
copy  made  of  all  or  any  portion  of  the 
record  pertaining  to  the  individual  in  a 
form  comprehensible  to  the  requester. 

(ii)  The  System  Manager  may  release 
records  to  the  individual’s  representative 
who  has  the  written  consent  of  the  in¬ 
dividual.  The  System  Manager  will  re¬ 
quire  reasonable  identification  of  indi¬ 
viduals  to  assure  that  records  are  dis¬ 
closed  to  the  proper  person.  No  verifica¬ 
tion  of  identity  will  be  required  of  an  in¬ 
dividual  seeking  access  to  records  which 
are  otherwise  available  to  any  member 
of  the  public  under  the  Freedom  of  In¬ 
formation  Act.  Identification  require¬ 
ments  should  be  consistent  with  the  na¬ 
ture  of  the  records  being  disclosed.  For 
disclosure  of  records  to  an  individual  in 
person,  the  System  Manager  will  require 
that  the  individual  show  some  form  of 
identification.  For  records  disclosed  to  an 
Individual  in  person  or  by  mail,  the  Sys¬ 
tem  Manager  may  require  whatever 
identifying  information  is  needed  to  lo¬ 
cate  the  record;  i.e.,  name,  social  security 
number,  date  of  birth.  If  the  sensitivity 
of  the  data  warrants,  the  System  Man¬ 
ager  may  require  a  signed  notarized 
statement  of  identity.  The  System  Man¬ 
ager  may  compare  the  signatures  of  the 
requester  with  those  in  the  records  to 
verify  identity.  An  individual  will  not  be 
denied  access  to  his  record  for  refusing 
to  disclose  his  social  security  number  un¬ 
less  disclosure  is  required  by  statute  or  by 


FEDERAL  REGISTER,  VOL  40,  NO.  166— TUESDAY,  AUGUST  26,  1975 


PROPOSED  RULES 


37503 


regulation  adopted  before  1  January 
1975.  An  individual  will  not  be  denied  ac¬ 
cess  to  records  pertaining  to  him  because 
the  records  are  exempted  from  disclosure 
under  the  provisions  of  the  Freedom  of 
Information  Act. 

(iii)  The  System  Manager  will  not 
deny  access  to  a  record  or  a  copy  thereof 
to  an  individual  solely  because  its  phys¬ 
ical  presence  is  not  readily  available  (i.e. 
on  magnetic  tape)  or  because  the  context 
of  the  record  may  disclose  sensitive  in¬ 
formation  about  another  individual.  To 
protect  the  personal  privacy  of  other  in¬ 
dividuals  who  may  be  identified  in  a  rec¬ 
ord,  the  System  Manager  shall  prepare 
an  extract  to  delete  only  that  informa¬ 
tion  which  would  not  be  releasable  to  the 
requesting  individual  under  the  Freedom 
of  Information  Act. 

y  (iv)  When  the  System  Manager  is  of 
the  opinion  that  the  disclosure  of  medi¬ 
cal  information  could  have  an  adverse 
effect  upon  the  individual  to  whom  it  per¬ 
tains,  the  System  Manager  will  promptly 
request  the  individual  to  submit  the 
name  and  address  of  a  doctor  who  will 
determine  whether  the  medical  record 
may  be  disclosed  directly  to  the  individ¬ 
ual.  The  System  Manager  will  then  re¬ 
quest  the  opinion  of  the  doctor  named 
by  the  individual  on  whether  a  medical 
record  may  be  disclosed  to  the  individual. 
The  System  Manager  shall  disclose  the 
medical  record  to  the  individual  to  whom 
it  pertains  unless,  in  the  judgment  of  the 
doctor,  access  to  the  record  could  have 
an  adverse  effect  upon  the  individual’s 
physical  or  mental  health.  In  this  event 
the  System  Manager  will  transmit  the 
record  to  the  doctor  and  immediately 
inform  the  individual. 

(v)  The  fees  to  be  charged,  if  any,  to 
an  individual  for  making  copies  of  his 
record,  excluding  the  cost  of  any  search 
for  and  review  of  the  record,  will  be  in 
accordance  with  the  “Schedule  of  Fees” 
as  set  forth  in  32  CFR  286.5  and  286.10. 

(vi)  The  System  Manager  of  the  record 
will  permit  an  individual  to  request 
amendment  of  a  record  pertaining  to  the 
individual.  Requests  to  amend  records 
shall  be  in  person  or  in  writing  and  shall 
be  submitted  to  the  System  Manager  who 

♦maintains  the  records.  Such  requests 
should  contain  as  a  minimum,  identify¬ 
ing  information  needed  to  locate  the  rec¬ 
ord,  a  brief  description  of  the  item  or 
items  of  information  to  be  amended,  and 
the  reason  for  the  requested  change. 

(vii)  The  System  Manager  will  provide 
a  written  acknowledgment  of  the  receipt 
of  a  request  to  amend  a  record  to  the 
individual  who  requested  the  amend¬ 
ment  within  10  days  (excluding  Satur¬ 
days,  Sundays,  and  legal  public  holidays) 
after  the  date  of  receipt  of  such  request. 
Such  an  acknowledgment  may,  if  neces¬ 
sary,  request  any  additional  information 
needed  to  make  a  determination.  No 
acknowledgment  is  required  if  the  re¬ 
quest  can  be  reviewed  and  processed  and 
the  individual  notified  of  compliance  or 
denial  within  the  10  day  period. 

(viii)  The  System  Manager  will 
promptly  take  one  of  the  following  ac¬ 
tions  on  requests  to  amend  records: 


(A)  Refer  the  request  to  the  agency 
or  office  that  has  control  of  and  main¬ 
tains  the  record  in  those  instances  where 
the  record  requested  remains  the  prop¬ 
erty  of  the  controlling  office  or  agency. 

•»(B)  In  accordance  with  existing  stat¬ 
ute,  regulation,  or  administrative  pro¬ 
cedure,  make  any  correction  of  any  por¬ 
tion  thereof  which  the  individual  be¬ 
lieves  is  not  accurate,  relevant,  timely  or 
complete,  or 

(C)  Inform  the  individual  of  the  Sys¬ 
tem  Manager’s  refusal  to  amend  the  rec¬ 
ord  in  accordance  with  the  individual’s 
request,  the  reason  for  the  refusal,  and 
the  individual’s  right  to  request  a  re¬ 
view  of  the  refusal  by  the  Director,  DCA, 
through  the  DCA  Privacy  Act  Board. 

(ix)  The  DCA  Privacy  Act  Board  will 
be  comprised  of  the  DCA  Counsel,  as 
Chairman:  the  Assistant  to  the  Director 
for  Administration,  and  the  Assistant  to 
the  Director  for  Personnel:  or  in  their 
absence,  their  authorized  representa¬ 
tives.  The  individual  who  disagrees  with 
the  refusal  of  the  System  Manager  to 
amend  his  record  may  request  a  review 
of  this  refusal  by  the  DCA  Privacy  Act 
Board.  The  request  for  the  review  may  be 
made  orally  or  in  writing  and  shall  be 
made  to  the  System  Manager.  The  Sys¬ 
tem  Manager  will  promptly  forward  the 
request  for  review  to  the  Chairman  of 
the  Board  to  make  a  proper  review.  The 
Board  will  promptly  review  the  matter. 
If,  after  review,  the  Board  is  unanimous 
in  its  decision  that  the  record  be  amended 
in  accordance  with  the  request  of  the 
individual  then  the  Chairman  of  the 
Board  shall  so  notify  the  System  Man¬ 
ager.  The  System  Manager  will  immedi¬ 
ately  make  the  necessary  corrections  to 
the  record  and  will  promptly  notify  the 
individual.  The  System  Manager  will,  if 
an  accounting  of  disclosure  of  the  record 
has  been  made,  advise  all  previous  re¬ 
cipients  of  the  record,  which  was  cor¬ 
rected,  of  the  correction  and  its  sub¬ 
stance.  This  will  be  done  in  all  instances 
when  a  record  is  amended.  If,  after  re¬ 
view,  the  Board  decides  that  the  request 
for  amendment  should  be  denied,  it  will 
promptly  forward  its  recommendation  to 
the  Director,  DCA.  A  majority  vote  of 
the  members  of  the  Board  will  constitute 
a  recommendation  to  the  Director. 

(x)  The  Director,  DCA,  upon  receipt 
of  the  Board’s  recommendation,  will 
complete  the  review  and  make  a  final 
determination. 

(xi)  If  the  Director,  DCA,  after  his 
review,  agrees  with  the  individual’s  re¬ 
quest  to  amend  the  record,  he  will, 
through  the  DCA  Counsel,  so  advise  the 
individual  in  writing.  The  System  Man¬ 
ager  will  receive  a  copy  of  the  Director’s 
decision  and  will  assure  that  the  record 
is  corrected  accordingly  and  that  if  an 
accounting  of  disclosure  of  the  record  has 
been  made  made,  advise  all  previous  re¬ 
cipients  of  the  record  which  was  cor¬ 
rected  of  the  correction  and  its  sub¬ 
stance. 

(xii)  If,  after  his  review,  the  Director 
refuses  to  amend  the  records  as  the  indi¬ 
vidual  requested,  he  will,  through  the 
DCA  Counsel,  advise  the  individual  of  his 


refusal  and  the  reasons  for  it;  of  the  in¬ 
dividual’s  right  to  file  a  concise  state¬ 
ment  setting  forth  the  reasons  for  the 
individual’s  disagreement  with  the  deci¬ 
sion  of  the  Director,  DCA;  that  the  state¬ 
ment  which  is  filed  will  be  made  available 
to  anyone  to  whom  the  record  is  subse¬ 
quently  disclosed  together  with,  at  the 
discretion  of  the  Agency,  a  brief  state¬ 
ment  by  the  Agency  summarizing  its  rea¬ 
sons  for  refusing  to  amend  the  record; 
that  prior  recipients  of  the  disputed  rec¬ 
ord  will  be  provided  a  copy  of  any  state¬ 
ment  of  dispute  to  the  extent  that  an 
accounting  of  disclosures  was  main¬ 
tained;  and  of  the  individual’s  right  to 
seek  judicial  review  of  the  Agency’s  re- 
1  fusal  to  amend  a  record. 

(xiii)  The  Director’s  final  determina¬ 
tion  on-  the  individual’s  request  for  a 
review  of  the  System  Manager’s  initial 
refusal  to  amend  the  record  must  be 
concluded  within  30  days  (excluding 
Saturdays,  Sundays,  and  legal  public 
holidays)  from  the  date  on  which  the 
individual  requested  such  review  unless 
the  Director  determines  that  a  fair  and 
equitable  review  cannot  be  made  within 
that  time.  If  additional  time  is  required, 
the  individual  will  be  informed  in  writing 
of  reasons  for  the  delay  and  of  the  ap¬ 
proximate  date  on  which  the  review  is 
expected  to  be  completed. 

(xiv)  After  the  Director,  DCA  has  re¬ 
fused  to  amend  a  record  and  the  individ¬ 
ual  has  filed  a  statement  setting  forth 
the  reasons  for  the  individual’s  disagree¬ 
ment  with  the  decision  of  the  Director, 
the  System  Manager  will  clearly  note  any 
portion  of  the  record  which  is  disputed. 
The  System  Manager’s  notation  should 
make  clear  that  the  record  is  disputed 
and  this  should  be  apparent  to  anyone 
who  may  subsequently  have  access  to,  use, 
or  disclose  the  record.  When  the  System 
Manager  has  previously  disclosed  or  will 
subsequently  disclose  that  portion  of  the 
record  which  is  disputed  he  will  note  that 
that  portion  of  the  record  is  disputed  and 
will  provide  the  recipients  of  the  record 
with  a  copy  of  the  individual’s  statement 
setting  forth  the  reasons  for  the  individ¬ 
ual’s  disagreement  with  the  decision  of 
the  Director  not  to  amend  the  record. 
The  System  Manager  will  also  provide  re¬ 
cipients  of  the  disputed  record  with  a 
brief  summary  of  the  Director’s  reasons 
for  not  making  the  requested  amend¬ 
ments  to  the  record. 

(xv)  Nothing  herein  shall  allow  an  in¬ 
dividual  access  to  any  information  com¬ 
piled  in  reasonable  anticipation  of  a  civil 
action  or  proceeding. 

(xvi)  Any  requests  by  an  individual  for 
access  to  or  copies  of  his  records  shall  be 
processed  in  accordance  with  this  Part 
and  32  CFR  286a. 

(d)  DCA  System  Managers  will  be: 

(1)  Responsible  for  complying  with 
the  provisions  contained  in  32  CFR  286a. 8 
relating  to  the  disclosure  to  others  of  per¬ 
sonal  records,  obtaining  the  written  con¬ 
sent  of  individuals  to  whom  the  record 
pertains,  and  for  keeping  an  accurate  ac¬ 
counting  of  each  disclosure  of  a  record. 

(2)  Responsible  for  providing  to  the 
Civilian  Assistant  to  the  Chief  of  Staff 
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the  information  requested  in  32  CFR 
286a.5.  However,  the  information  will  be 
reported  on  a  quarterly  basis  with  the 
first  report  due  to  the  Civilian  Assistant 
to  the  Chief  of  Staff  by  31  December 
1975. 

(e)  The  Assistant  to  the  Director  for 
Administration,  Headquarters,  DC  A  will: 

( 1 )  Be  responsible  for  furnishing  writ¬ 
ten  guidelines  to  assist  System  Managers 
and  other  DCA  o facials  in  evaluating  and 
implementing  paperwork  management 
procedures  required  under  the  Privacy 
Act  of  1974.  In  this  regard  it  should  be 
noted  that  the  Act  establishes  a  number 
of  requirements.  Among  these  are  the  re¬ 
quirements:  (i)  to  disclose  records  con¬ 
tained  in  a  system  of  records  only  under 
conditions  specified  in  the  law,  (ii)  to 
maintain  an  accounting  of  such  disclo¬ 
sures,  (iii)  to  establish  procedures  for 
the  disclosure  to  an  individual  of  his  rec¬ 
ord  or  information  pertaining  to  him, 
(iv)  for  reviewing  a  request  concerning 
the  amendment  of  such  record,  and  <v) 
for  permitting  individuals  to  file  a  state¬ 
ment  of  disagreement  which  will  be  for¬ 
warded  with  subsequent  disclosures.  The 
guidelines  will  cover  those  portions  of 
the  Privacy  Act  which  requires  paperwork 
systems  for  implementation.  In  prepar¬ 
ing  those  guidelines  the  Assistant  to  the 
Director  for  Administration  will  make 
use  of  the  “Records  Management  System 
for  Implementing  the  Privacy  Act”  as 
provided  by  the  GSA  National  Archives 
and  Records  Service,  Office  of  Records 
Management.  The  GSA  procedures  and 
guidelines  will  be  adapted  and  modified 
as  required  to  meet  DCA  needs. 

(2)  Be  responsible  for  providing  the 
“Forms”  which  are  required  to  comply 
with  32  CFR  286a.9(b). 

(f)  The  Assistant  to  the  Director  for 
Personnel,  Headquarters,  DCA  will: 

(1)  Be  responsible  for  development, 
within  DCA,  of  an  appropriate  training 
program  for  all  DCA  personnel  whose 
duties  involve  responsibilities  for  sys¬ 
tems  of  records  affected  by  the  Privacy 
Act. 

(2)  Assure  that  DCA  personnel  in¬ 
volved  in  the  design,  development,  op¬ 
eration,  or  maintenance  of  any  system 
of  records,  as  defined  in  32  CFR  286a.6 
are  informed  of  all  requirements  to  pro¬ 
tect  the  privacy  of  the  individuals  who 
are  subjects  of  the  records.  The  criminal 
penalties  and  civil  suit  aspects  of  the 
Privacy  Act  will  be  emphasized. 

(3)  Assure  that  within  DCA  admin¬ 
istrative  and  physical  safeguards  are 
established  to  protect  information  from 
unauthorized  or  unintentional  access, 
disclosure,  modification  or  destruction 
and  to  ensure  that  all  persons  whose  of¬ 
ficial  duties  require  access  to  or  proc¬ 
essing  and  maintenance  of  personal 
information  are  trained  in  the  proper 
safeguarding  and  use  of  such  informa¬ 
tion. 

§  287a.7  Questions. 

Questions  on  both  the  substance  and 
procedure  of  the  Privacy  Act  and  the 
DCA  implementation  thereof  should  be 
addressed  to  the  DCA  Counsel  by  the 


most  expeditious  means  possible,  includ¬ 
ing  telephone  calls. 

August  14, 1975. 

Lee  M.  Paschell, 
Lieutenant  General,  USAF, 
Director. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives  OASD  (.Comptroller) . 
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Defense  Contract  Audit  Agency 
[  32  CFR  Part  290a  ] 

PRIVACY  ACT  OF  1974 
Notice  of  Proposed  Rulemaking 

Notice  is  hereby  given  that  the  De¬ 
fense  Contract  Audit  Agency  (DCAA) 
proposes  to  change  32  CFR  Part  290  by 
adding  Part  290a  to  implement  the  pro¬ 
visions  of  the  Privacy  Act  of  1974.  Part 
290a  establishes  proposed  regulations  for 
the  protection  of  personal  privacy  of  in¬ 
dividuals  identified  ir.  records  maintained 
by  DCAA  and  also  implements  the  De¬ 
partment  of  Defense  Directive  5400.11, 
“Personal  Privacy  and  Rights  of  Indi¬ 
viduals  Regarding  Their  Personal  Rec¬ 
ords,”  which  applies  to  all  Department 
of  Defense  components.  The  proposed 
Part  290a  applies  to  all  DCAA  activities. 
Significant  portions  of  this  part  provide 
the  procedures  for  requests  for  informa¬ 
tion,  access  to  and  disclosure  of  records, 
and  the  actions  taken  by  DCAA  in  re¬ 
sponse  to  such  requests.  This  part  also 
contains  provisions  for  accounting  of  dis¬ 
closures  made,  requests  for  amendment 
of  a  record,  and  appeal  from  refusal  to 
amend  a  record. 

Sections  5  U.S.C.  552a3(j)  and  (3)  (k) 
authorize  an  agency  head  to  exempt  cer¬ 
tain  systems  of  records  or  parts  of  cer¬ 
tain  systems  of  records  from  some  of  the 
requirements  of  the  act.  This  part  re¬ 
serves  to  the  Director,  DCAA,  as  head  of 
an  agency,  the  right  to  create  exemptions 
pursuant  to  the  exemption  provisions  of 
the  act.  All  systems  of  records  main¬ 
tained  by  DCAA  shall  be  exempt  from 
the  requirements  of  5  U.S.C.  552a (d) 
pursuant  to  5  U.S.C.  552a(3)  (k)  (1)  to 
the  extent  that  the  system  contains  any 
information  properly  classified  under 
Executive  Order  11652,  “Classification 
and  Declassification  of  National  Security 
Information  and  Material,”  dated  March 
8,  1972  (37  FR  10053,  May  19,  1972)  and 
which  is  required  by  the  Executive  Order 
to  be  kept  secret  in  the  interest  of  na¬ 
tional  defense  or  foreign  policy.  This  ex¬ 
emption,  which  may  be  applicable  to 
parts  of  all  systems  of  records,  is  neces¬ 
sary  because  certain  record  systems  not 
otherwise  specifically  designated  for 
exemptions  may  contain  Isolated  in¬ 
formation  which  has  been  properly 
classified. 

Any  person  interested  in  the  rules  pro¬ 
posed  herein  may  participate  in  this  pro¬ 
posed  rulemaking  by  submitting  either 
in  person  or  through  the  mall  written 
data,  views,  or  arguments  to  the  Records 


Administrator,  Defense  Contract  Audit 
Agency,  Cameron  Station,  Building 
4A320,  Alexandria,  VA  22314,  on  or  be¬ 
fore  September  25,  1975. 

These  regulations  are  proposed  under 
the  authority  of  5  U.S.C.  301  and  5  U.S.C. 
552a. 

In  consideration  of  the  foregoing.  Part 
290a,  Title  32,  United  States  Code,  is 
proposed  as  follows: 

PART  290a— PRIVACY  RIGHTS  OF 
INDIVIDUALS 

Sec. 

290a. 1  Purpose. 

290a.2  Applicability  and  scope. 

290a.3  Policy. 

290a.4  Authority  and  responsibilities. 
290a.5  Definitions. 

290a. 6  Access  by  the  Individual. 

290a.7  Disclosure  to  others. 

290a.8  Collection  of  personal  Information 
from  Individuals. 

290a.9  Exemptions. 

290a.  10  Systems  of  records. 

290a.  11  Annual  report. 

Authority  :  5  U.S.C.  552a 
§  290a.  1  Purpose. 

This  part  implements  the  Privacy  Act 
of  1974  by  prescribing: 

(a)  The  procedures  whereby  Individ¬ 
uals  can  be  notified  in  response  to  their 
requests  if  any  system  of  records  named 
by  the  individuals  contains  a  record  per¬ 
taining  to  them. 

(b)  The  requirements  for  verifying 
the  identity  of  individuals  who  request 
their  records  or  information  pertaining 
to  them  before  the  record  or  Information 
shall  be  made  available  to  them. 

(c)  The  procedures  for  granting  ac¬ 
cess  to  individuals  upon  their  request  of 
their  records  or  information  pertaining 
to  them. 

(d)  The  procedures  for  reviewing  a 
request  from  individuals  concerning  the 
amendment  of  any  record  or  informa¬ 
tion  pertaining  to  them,  for  making  a 
determination  on  the  request,  and 
for  an  appeal  of  an  initial  adverse 
determination. 

(e)  The  procedures  and  policies  gov¬ 
erning  the  collection,  safeguarding, 
maintenance,  public  notice,  use  and  dis¬ 
semination  of  personal  information. 

(f)  The  conditions  under  which  dis¬ 
closure  of  personal  information  may  be 
made  and  procedures  for  exempting  sys¬ 
tems  of  records  from  certain  require¬ 
ments  of  the  Privacy  Act  of  1974.  — 

§  290a. 2  Applicability  and  scope. 

(a)  The  provisions  of  this  part  apply 
to  all  offices  of  DCAA,  hereinafter  re¬ 
ferred  to  singularly  as  “element”  or  col¬ 
lectively  as  “elements.” 

(b)  Its  provisions  govern  the  collection, 
maintenance,  use,  and  dissemination  of 
personal  information  by  DCAA  in  ac¬ 
cordance  with  5  U.S.C.  552a.  Requests 
for  information  under  the  Freedom  In¬ 
formation  Act,  5  U.S.C.  552,  by  an  indi¬ 
vidual  about  another  individual  are  gov¬ 
erned  by  the  provisions  of  32  CFR  Part 
290.  Requests  for  personal  Information 
from  the  General  Accounting  Office  are 
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governed  by  DoD  Directive  7650.'  “Gen¬ 
eral  Accounting  Office  Comprehensive 
Audits.”  Requests  for  personal  informa¬ 
tion  from  the  Congress  are  governed  by 
DoD  Directive  5400.4,  “Provision  of  In¬ 
formation  to  Congress.”  Requests  from 
other  agencies  and  the  courts  are  gov¬ 
erned  by  DoD  Directive  5400.7,  “Avail¬ 
ability  to  the  Public  of  Department  of 
Defense  Information,”  as  well  as  the 
provisions  of  this  part. 

§  290a. 3  Policy. 

The  policy  of  DCAA  is  to: 

(a)  Preserve  the  personal  privacy  of 
individuals,  permitting  individuals  to 
know  what  records  pertaining  to  them 
are  collected,  maintained,  used,  or  dis¬ 
seminated  in  DCAA,  and  to  have  access 
to  and  have  a  comprehensible  copy  made 
of  all  or  any  portion  of  such  records,  and 
to  correct  or  amend  such  records. 

(b)  Collect,  maintain,  use,  or  dissemi¬ 
nate  any  record  of  identifiable  personal 
information  in  a  manner  that  assures 
that  such  action  is  for  a  necessary  and 
lawful  purpose;  that  the  information  is 
timely  and  accurate  for  its  intended  use; 
and  that  adequate  safeguards  are  pro¬ 
vided  to  prevent  misuse  of  such  informa¬ 
tion. 

§  290a. 4  Authority  and  responsibilities. 

(a)  A  DCAA  Privacy  Board  is  hereby 
established  for  the  purpose  of  ensuring 
the  preservation  of  individual  privacy 
within  DCAA.  Privacy  programs  and  pro¬ 
cedures  shall  be  developed  and  coordi¬ 
nated  by  the  Board  under  the  Chairman¬ 
ship  of  the  Assistant  Director,  Resources. 

(1)  Membership  of  the  Board  shall 
consist  of  the  Records  Administrator, 
who  shall  serve  as  the  Executive  Secre¬ 
tary  and  Privacy  Act  Coordinator;  and 
representatives  designated  by  the  Assist¬ 
ant  Director,  Operations  and  Profes¬ 
sional  Development:  Counsel;  Director 
of  Personnel;  Security  Officer;  and  Chief, 
Information  Systems  and  Services. 

(2)  The  Board  shall : 

(i)  Identify  all  DCAA  systems  of  rec¬ 
ords  affected  by  the  Privacy  Act. 

(ii)  Obtain  all  data  required  by  the  act 
concerning  each  record  system  so  iden¬ 
tified. 

(iii)  Review  policies,  practices,  and 
procedures  relating  to  each  identified 
system  of  records  to  ensure  they  are  in 
conformity  with  the  act. 

(iv)  Supervise  the  preparation  for 
publication  in  the  Federal  Register  of 
all  required  information  on  systems  of 
records  affected  by  the  act. 

(v)  Review  for  conformity  with  the 
act,  all  procedures,  including  forms, 
which  require  an  individual  to  furnish 
information,  and  formulate  corrective  or 
supplementary  provisions  as  necessary. 

(vi)  Recommend  establishment  of 
DCAA  policies  which  will  provide  safe¬ 
guards  to  protect  personal  privacy. 

(vii)  Refer  to  the  DoD  Privacy  Board 
for  resolution,  any  requirement  for  in¬ 
formation  from  an  individual  which  does 
not  appear  to  be  clearly  authorized  by 
law  or  Executive  Order. 

(viii)  Review  proposed  DCAA  imple¬ 
menting  instructions  and  related  issu¬ 


ances  pertaining  to  the  Privacy  Act,  as 
well  as  draft  implementing  instructions 
of  the  DCAA  Regional  Offices  in  order  to 
provide  the  comprehensive  guidance 
necessary  for  uniform  compliance  with 
the  act  by  all  elements  of  DCAA. 

(ix)  Serve  as  the  focal  point  on  privacy 
matters  for  DCAA  in  communications 
with  the  DoD  Privacy  Board,  which 
serves  as  the  focal  point  in  communica¬ 
tions  with  the  Office  of  Management  and 
Budget,  the  Privacy  Protection  Study 
Commission,  and  the  Office  of  the  Federal 
Register  for  publication  of  systems 
notices. 

(b)  The  Assistant  Director,  Resources, 
in  conjunction  with  the  DCAA  Privacy 
Board  shall: 

(i)  Formulate  DCAA  policies  to  ensure 
that  both  manual  and  ADP  record  sys¬ 
tems  contain  appropriate  safeguards  to 
protect  personal  privacy. 

(ii)  Ensure  development  throughout 
DCAA  of  an  appropriate  training  pro¬ 
gram  for  all  personnel  whose  duties  in¬ 
volve  responsibilities  for  systems  of  rec¬ 
ords  affected  by  the  act. 

(c)  Regional  Managers,  the  Chief  of 
Detachment  A,  and  the  Manager  of  the 
Defense  Contract  Audit  Institute  shall: 

(i)  Designate  a  Privacy  Act  Coordina¬ 
tor  to  serve  as  the  principal  point  of  con¬ 
tact  on  privacy  matters. 

(ii)  Establish  and  maintain  an  effec¬ 
tive  internal  Privacy  Program,  through 
all  echelons,  as  prescribed  herein. 

§  290u.3  Definitions. 

(a)  Individual:  A  citizen  of  the  United 
States  or  an  alien  lawfully  admitted  for 
permanent  residence.  A  legal  guardian 
or  the  parent  of  a  minor  has  the  same 
rights  as  the  individual  and  may  act  on 
behalf  of  the  individual. 

(b)  Maintain  (records  on  individuals) : 
Collect,  use,  or  disseminate. 

(c)  Record:  Any  item,  collection,  or 
grouping  of  information  about  an  in¬ 
dividual  that  is  maintained  by  an  ele¬ 
ment,  including,  but  not  limited  to,  his 
education,  financial  transactions,  medi¬ 
cal  history,  and  criminal  or  employment 
history  and  that  contains  his  name,  or 
the  identifying  number,  symbol,  or  other 
identifying  particular  assigned  to  the  in¬ 
dividual,  such  as  a  finger  or  voice  print 
or  a  photograph. 

(d)  System  of  records:  A  group  of  any 
records  under  the  control  of  any  element 
from  which  information  is  retrieved  by 
the  name  of  an  individual  or  by  some 
identifying  number,  symbol  or  other 
identifying  particular  assigned  to  the 
individual. 

(e)  Routine  use:  With  respect  to  the 
disclosure  of  a  record,  the  use  of  such 
record  for  a  purpose  which  is  compatible 
with  the  purpose  for  which  it  was  col¬ 
lected.  Routine  use  encompasses  not  only 
common  or  ordinary  uses,  but  also  all 
the  proper  and  necessary  uses  of  the  rec¬ 
ord,  even  if  such  use  occurs  Infrequently. 

§  290a.6  Access  by  the  individual. 

(a)  Upon  request,  individuals  shall  be 
informed  whether  or  not  a  system  of  rec¬ 
ords  contains  a  record  pertaining  to 
them.  Accompanied  by  a  person  of  their 


own  choosing,  if  so  desired,  they  shall  be 
permitted  to  review  their  records,  and  to 
obtain  a  copy  of  such  records  in  a  form 
that  is  comprehensible  to  them  unless 
exempted  in  accordance  with  §§  290a. 9  or 
290a.6(a)5,  below.  This  part  does  not  re¬ 
quire  that  a  record  be  created  or  that  an 
individual  be  given  access  to  records 
which  are  not  retrieved  by  name  or  other 
individual  identifier.  Only  costs  of  repro¬ 
duction  may  be  charged;  however,  the 
first  copy  of  a  personnel  record  main¬ 
tained  by  a  Personnel  Office  should  be 
provided  without  charge.  If  copying  is 
the  only  means  whereby  the  record  can 
be  made  available  to  the  individual,  re¬ 
production  fees  will  not  be  assessed;  i.e., 
when  a  copy  must  be  made  in  order  to 
delete  information  contained  on  the  rec¬ 
ord  pertaining  to  another  individual. 

(1)  The  granting  of  access  to  a  record 
containing  personal  information  shall 
not  be  conditioned  upon  any  requirement 
that  the  individual  state  a  reason  or 
otherwise  justify  the  need  to  gain  access. 

(2)  Prior  to  being  granted  access  to 
personal  information,  an  individual  may 
be  required  to  provide  reasonable  verifi¬ 
cation  of  identity. 

(i)  No  verification  of  identity  shall 
be  required  of  an  individual  seeking  ac¬ 
cess  to  records  which  are  otherwise  avail¬ 
able  to  any  member  of  the  public  under 
the  Freedom  of  Information  Act. 

(ii)  For  the  individual  who  series  ac¬ 
cess  in  person,  verification  of  identity 
will  normally  be  made  by  those  docu¬ 
ments  which  an  individual  is  likely  to 
have  readily  available,  such  as  an  em¬ 
ployee  identification  card,  driver’s  li¬ 
cense,  or  medical  card. 

(iii)  When  access  is  requested  by  mail, 
verification  of  identity  may  consist  of 
the  individual  providing  certain  mini¬ 
mum  identifying  data,  such  as  name  and 
date  of  birth  or  such  other  information 
deemed  necessary  by  the  element  hav¬ 
ing  custody  of  the  record.  If  the  sensitiv¬ 
ity  of  the  data  warrants,  a  signed  nota¬ 
rized  statement  of  identity  may  be  re¬ 
quired. 

(iv)  An  individual  shall  not  be  denied 
access  to  his  record  for  refusing  to  dis¬ 
close  his  Social  Security  Number  (SSN) 
unless  disclosure  of  his  SSN  is  required 
by  statute  or  by  regulation  adopted  be¬ 
fore  January  1, 1975. 

(v)  Individuals  may  not  be  denied  ac¬ 
cess  to  a  record  pertaining  to  themselves 
because  those  records  are  exempted  from 
disclosure  under  the  provisions  of  the 
Freedom  of  Information  Act. 

(3)  Access  to  a  record  or  a  copy  there¬ 
of  will  not  be  denied  solely  because  the 
record’s  physical  presence  is  not  readily 
available,  i.e.,  on  magnetic  tape,  or  be¬ 
cause  the  context  of  the  record  may  dis¬ 
close  sensitive  information  about  an¬ 
other  individual.  To  protect  the  personal 
privacy  of  other  individuals  who  may  be 
identified  in  a  record,  an  extract  shall 
be  prepared  deleting  only  that  informa¬ 
tion  which  would  not  be  released  to  the 
requesting  individual  under  the  Free¬ 
dom  of  Information  Act. 

(4)  A  medical  record  shall  be  dis¬ 
closed  to  the  individual  to  whom  it  per¬ 
tains  unless,  in  the  judgment  of  a  physi- 


FEDERAL  REGISTER,  VOL.  40,  NO.  166 — TUESDAY,  AUGUST  26,  1975 


37506 

cian,  access  to  such  record  could  have 
an  adverse  effect  upon  the  Individual’s 
physical  or  mental  health.  When  it  has 
teen  determined  that  the  disclosure  of 
medical  information  could  have  an  ad¬ 
verse  effect  upon  the  individual  to  whom 
it  pertains,  the  information  may  be 
transmitted  to  a  physician  named  by  the 
requesting  individual. 

(5)  This  part  does  not  entitle  an  in¬ 
dividual  to  have  access  to  any  informa¬ 
tion  compiled  in  reasonable  anticipation 
of  a  civil  action  or  proceeding. 

(6)  An  element  may  require  an  indi¬ 
vidual  who  wishes  to  be  accompanied  by 
another  person  when  receiving  access  to 
his  records  to  furnish  a  •written  state¬ 
ment  authorizing  discussion  of  the  rec¬ 
ords  in  the  presence  of  the  accompany¬ 
ing  person. 

(7)  Any  requests  from  individuals  for 
access  to  or  copies  of  their  own  records 
shall  be  processed  in  accordance  with 
this  part  and  not  the  Freedom  of  Infor¬ 
mation  Act.  Normally,  requests  for  ac¬ 
cess  to  records  should  be  acknowledged 
within  10  working  days  of  receipt  and 
access  provided  within  30  working  days. 

(8)  Copies  of  investigatory  records 
compiled  by  an  investigative  organiza¬ 
tion,  but  in  the  temporary  custody  of  an 
element  requesting  the  record  for  pur¬ 
poses  of  adjudication  or  other  personnel 
action,  are  the  records  of  the  originat¬ 
ing  iifvestigative  agency.  Individuals 
seeking  access  to  such  records  shall  be 
directed  to  the  originating  investigative 
organization  and  should  be  instructed  to 
direct  all  requests  submitted  under  the 
Privacy  Act  of  1974  to  that  organization. 
Records  concerning  the  adjudication,  or 
other  personnel  actions  based  on  the  in¬ 
vestigative  records,  are  originated  by 
DCAA  and  are  the  records  of  DCAA.  All 
requests  for  these  records  shall  be  re¬ 
ferred  to  the  Security  Officer,  DCAA  who 
shall  respond  under  this  part  concerning 
them. 

(b)  Amendment  of  personal  informa¬ 
tion. 

(1)  Individuals  shall  be  given  the  op¬ 
portunity  to  request  either  in  person  or 
through  the  mail  that  their  records  be 
amended;  however,  all  requests  for  such 
amendment  must  be  made  in  writing. 
Instructions  for  the  preparation  of  a  re¬ 
quest  and  any  forms  employed  should  be 
as  brief  and  as  simple  as  possible.  Re¬ 
quests  should  contain  as  a  minimum, 
identifying  information  to  locate  the 
record,  a  description  of  the  items  to  be 
amended  and  the  reason  amendment  is 
being  requested.  A  request  shall  not  be 
rejected  or  required  to  be  resubmitted 
unless  additional  information  is  essen¬ 
tial  to  process  the  request.  Incomplete  or 
inaccurate  requests  shall  not  be  rejected 
categorically;  the  individual  shall  be 
asked  to  clarify  the  request  as  needed. 
Individuals  shall  be  required  to  provide 
identification  of  identity  as  in  §  290a.6 
(a)  (2)  of  this  part  to  assure  that  the 
requester  is  seeking  to  amend  records 
pertaining  to  him  and  not  inadvertently 
or  intentionally,  the  records  of  another 
individual. 

(2)  A  written  acknowledgment  of  the 
receipt  of  a  request  for  amendment  of  a 
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record  must  be  provided  to  the  individ¬ 
ual  within  10  working  days  (excluding 
Saturdays,  Sundays,  and  legal  public 
holidays)  after  receipt  by  the  proper 
office.  The  acknowledgment  shall  clearly 
identify  the  request  and  advise  the  indi¬ 
vidual  when  he  may  expect  to  be  advised 
of  action  taken  on  the  request.  Whenever 
practicable  the  decision  shall  be  made 
within  30  working  days.  No  separate 
acknowledgment  of  receipt  is  necessary 
if  the  request  can  be  either  approved  or 
denied,  and  the  individual  advised  within 
the  10-day  period.  For  requests  presented 
in  person,  written  acknowledgment  may 
be  provided  at  the  time  the  request  is 
presented. 

(3)  If  the  element  agrees  with  any  por¬ 
tion  or  all  of  the  individual’s  request  to 
amend  a  record,  it  shall  promptly  advise 
the  individual  and  amend  the  record 
accordingly.  If  a  disclosure  accounting 
has  been  made,  the  element  shall  advise 
all  previous  recipients  of  the  record  that 
the  amendment  has  been  made  and  the 
substance  of  the  correction. 

(4)  If  the  element  disagrees  with  all 
or  any  portion  of  a  request  to  amend  a 
record,  it  shall  promptly: 

(i)  Advise  the  individual  of  its  refusal 
and  the  reasons  therefor; 

(ii)  Inform  the  individual  that  he  may 
request  a  further  review  by  the  Assistant 
Director,  Resources;  and 

(iii)  Describe  the  procedures  for  re¬ 
questing  such  a  review,  including  the 
name  and  address  of  the  Assistant 
Director,  Resources. 

(5)  A  review  of  the  initial  refusal  to 
amend  a  record  shall  be  made  if  re¬ 
quested  by  the  individual. 

(i)  The  Assistant  Director,  Resources, 
shall  make  a  review  of  the  initial  deter¬ 
mination. 

(ii)  If,  after  conducting  the  review, 
the  Assistant  Director,  Resources,  also 
refuses  to  amend  the  record  in  accord¬ 
ance  with  the  individual’s  request,  the 
individual  shall  be  notified: 

(A)  Of  the  refusal  and  the  reasons 
therefor; 

(B)  Of  the  right  to  file  a  concise  state¬ 
ment  of  reasons  for  disagreeing  with  the 
decision  of  the  agency; 

(C)  Of  the  procedures  for  filing  a 
statement  of  disagreement;  and  that 
such  statement  will  be  made  available  to 
anyone  to  whom  the  record  is  subse¬ 
quently  disclosed. 

(D)  That  prior  recipients  of  the  dis¬ 
puted  record  will  be  provided  a  copy  of 
the  statement  of  disagreement  to  the  ex¬ 
tent  that  an  accounting  of  disclosures  is 
maintained; 

(E)  Of  his  right  to  seek  judicial  review 
of  the  agency’s  refusal  to  amend  a 
record. 

(iii)  If  the  Assistant  Director,  Re¬ 
sources  determines  that  the  record 
should  be  amended  in  accordance  with 
the  request,  the  element  shall  amend  the 
record,  advise  the  individual  and  inform 
previous  recipients  where  an  accounting 
of  disclosures  has  been  maintained. 

(iv)  A  final  determination  on  the  in¬ 
dividual’s  request  for  a  review  of  an 
initial  refusal  to  amend  a  record  must 
be  completed  within  30  working  days 


after  receipt  by  the  proper  office  unless 
the  Director,  DCAA  determines  that  a 
fair  and  equitable  review  cannot  be  com¬ 
pleted  in  that  time.  If  additional  time  is 
required,  the  individual  shall  be  informed 
in  writing  of  the  reasons  for  the  delay 
and  of  the  approximate  date  on  which  the 
review  is  expected  to  be  completed. 

(6)  When  an  individual  files  a  state¬ 
ment  of  dispute,  the  element  shall  clear¬ 
ly  annotate  the  record  so  that  the  dis¬ 
pute  is  apparent  to  anyone  who  may  sub¬ 
sequently  grant  access  to,  use,  or  disclose 
the  record.  The  notation  itself  shall  be 
integral  to  the  record.  Where  an  ac¬ 
counting  of  disclosure  has  been  made,  the 
element  shall  advise  previous  recipients 
that  the  record  has  been  disputed  and 
shall  provide  a  copy  of  the  individual's 
statement. 

(i)  The  individual’s  statement  of  dis¬ 
pute  need  not  be  filed  as  an  integral 
part  of  the  record  to  which  it  pertains.  It 
shall,  however,  be  maintained  in  such  a 
manner  as  to  permit  ready  retrieval 
whenever  the  disputed  portion  of  the  rec¬ 
ord  is  to  be  disclosed.  When  information 
w-hich  is  the  subject  of  a  statement  of 
dispute  is  subsequently  disclosed,  the  ele¬ 
ment  shall  note  which  information  is 
disputed  and  provide  a  copy  of  the  in¬ 
dividual’s  statement. 

(ii)  An  element  may  include  a  brief 
summary  of  its  reasons  for  not  making 
an  amendment  when  disclosing  disputed 
information.  Summaries  normally  will  be 
limited  to  the  reasons  stated  to  the  in¬ 
dividual.  The  element’s  summary  will  be 
treated  as  part  of  the  individual’s  record ; 
however,  it  will  not  be  subject  to  the 
amendment  procedures. 

§  290a. 7  Disclosure  to  others. 

(a)  Except  as  prescribed  in  §  290a.6, 
this  part  does  not  require  disclosure  of 
records  to  anyone  other  than  the  individ¬ 
ual  to  whom  the  records  pertain. 

(b)  No  record  contained  in  a  system 
of  records  maintained  within  DCAA  shall 
be  disclosed  by  any  means  of  communi¬ 
cation  to  any  person,  or  to  any  agency 
outside  DCAA,  except  pursuant  to  a 
written  request  by,  or  with  the  prior  writ¬ 
ten  consent  of,  the  individual  to  whom 
the  record  pertains,  unless  disclosure  of 
the  record  will  be : 

(1)  To  those  officials  and  employees  of 
DCAA  who  have  a  need  for  the  record 
in  the  performance  of  their  duties  and 
the  use  is  compatible  with  the  purpose  for 
which  the  record  is  maintained.  This  in¬ 
cludes,  for  example,  transfer  of  informa¬ 
tion  between  DoD  components  when  per¬ 
sonnel  assigned  to  DCAA  are  processed  by 
an  activity  of  another  component  such 
as  the  Defense  Investigative  Service,  the 
Defense  Supply  Agency,  or  one  of  the 
Military  Departments. 

(2)  Required  to  be  disclosed  to  a  mem¬ 
ber  of  the  public  by  the  Freedom  of  In¬ 
formation  Act.  Some  examples  of  per¬ 
sonal  information  pertaining  to  civilian 
employees  which  are  normally  released 
without  an  unwarranted  invasion  of 
privacy  are:  name,  present  and  past  posi¬ 
tions,  office  phone  number,  and  grade. 
However,  disclosure  of  personal  informa¬ 
tion  pertaining  to  civilian  employees  shall 
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be  made  in  accordance  with  the  Federal 
Personnel  Manual  and,  therefore,  all  re¬ 
quests  for  such  information  should  be 
referred  to  the  appropriate  Personnel 
Office. 

(3)  For  a  routine  use  as  defined  in 
§  290a. 5  and  described  in  DCAA  record 
system  notices. 

(4)  To  the  Bureau  of  the  Census  for 
purposes  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity  au¬ 
thorized  by  law. 

(5)  To  a  recipient  who  has  provided 
DCAA  with  advance  adequate  written 
assurance  that:  the  record  will  be  used 
solely  as  a  statistical  research  or  report¬ 
ing  record;  the  record  is  to  be  trans¬ 
ferred  in  a  form  that  is  not  individually 
identifiable,  i.e.,  the  identity  of  the  in¬ 
dividual  cannot  be  determined  by  com¬ 
bining  various  statistical  records;  and 
will  not  be  used  po  make  any  decisions 
about  the  rights,  benefits,  or  entitlements 
of  an  individual. 

(6)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has 
sufficient  historical  or  other  value  to  war¬ 
rant  its  continued  preservation  by  the 
United  States  Government,  or  for  eval¬ 
uation  by  the  Administrator  of  General 
Services  or  his  designee  to  determine 
whether  the  record  has  such  value.  A 
record  transferred  to  a  Federal  records 
center  for  safekeeping  or  storage  does  not 
fall  within  this  category  since  Federal 
records  center  personnel  act  on  behalf 
of  DCAA  in  this  instance  and  the  rec¬ 
ords  remain  under  the  control  of  DCAA. 
No  disclosure  accounting  record  of  the 
transfer  of  records  to  Federal  records 
centers  need  be  maintained. 

(7)  To  another  agency  or  to  an  instru¬ 
mentality  of  any  governmental  jurisdic¬ 
tion  within  or  under  the  control  of  the 
United  States  for  a  civil  or  criminal  law 
enforcement  activity  if  the  activity  is  au¬ 
thorized  by  law,  and  if  the  head  of  the 
agency  or  instrumentality  has  made  a 
written  request  to  the  element  which 
maintains  the  record  specifying  the  par¬ 
ticular  portion  desired  and  the  law  en¬ 
forcement  activity  for  which  the  record 
is  sought.  Blanket  requests  for  all  records 
pertaining  to  an  individual  will  not  be 
accepted.  A  record  may  also  be  disclosed 
to  a  law  enforcement  agency  at  the  ini¬ 
tiative  of  the  Counsel,  DCAA  when  crim¬ 
inal  conduct  is  suspected,  provided  that 
such  disclosure  has  been  established  in 
advance  as  a  routine  use. 

(8)  To  a  person  pursuant  to  a  show¬ 
ing  of  compelling  circumstances  affecting 
the  health  or  safety  of  an  individual  if 
upon  such  disclosure  notification  is 
transmitted  to  the  last  known  address 
of  the  Individual  to  whom  the  record 
pertains. 

(9)  To  either  House  of  Congress,  or, 
to  the  extent  of  matter  within  its  jur¬ 
isdiction,  any  committee  or  subcommit¬ 
tee  thereof,  or  any  joint  committee.  This 
does  not  authorize  the  disclosure  of  any 
record  subject  to  this  part  to  members 

*  of  Congress  acting  in  their  individual 
capacities  or  on  behalf  of  their  constit¬ 
uents,  unless  the  individual  consents. 

(10)  To  the  Comptroller  General,  or 
any  of  his  authorized  representatives,  in 


the  course  of  the  performance  of  the 
duties  of  the  General  Accounting  Office. 

(11)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction. 

(i)  When  a  record  is  disclosed  under 
compulsory  legal  process  and  when  the 
issuance  of  that  order  or  subpoena  is 
made  public  by  the  court  which  issued  it, 
make  reasonable  efforts  to  notify  the 
individual  to  whom  the  record  pertains. 
This  may  be  accomplished  by  notifying 
the  individual  by  mail  at  his  most  recent 
address  as  contained  in  the  element’s 
records. 

<ii)  Upon  being  served  with  an  order 
to  disclose  a  record,  the  element  shall 
endeavor  to  determine  whether  the  issu¬ 
ance  of  the  order  is  a  matter  of  public 
record  and,  if  it  is  not,  seek  to  be  advised 
when  it  becomes  public.  An  accounting 
of  the  disclosure  shall  be  made  at  the 
time  f'e  element  complies  with  the  order 
or:  :bpoena. 

(c)  Each  DCAA  element,  with  respect 
to  each  system  of  records  under  its  co  l- 
trol.  shall: 

(1)  Except  for  disclosures  made  under 

(b) (1)  and  (b)(2),  above,  keep  an  ac¬ 
curate  accounting  of  the  date,  nature, 
and  purpose  of  each  disclosure  of  a  rec¬ 
ord  to  any  person  or  to  another  agency; 
and  the  name  and  address  of  the  person 
or  agency  to  whom  the  disclosure  is 
made.  A  DCAA  element  need  not  make 
a  notation  on  a  single  document  of  every 
disclosure  of  a  particular  record,  pro¬ 
vided  it  can  construct  from  its  system 
the  required  accounting  information 
when  required  by  the  individual:  when 
necessary  to  inform  previous  recipients 
of  any  amended  record:  or  when  pro¬ 
viding  a  cross  reference  to  the  justifica¬ 
tion  or  basis  upon  which  the  disclosure 
was  made,  including  any  written  docu¬ 
mentation  as  required  in  the  case  of  the 
release  of  records  for  statistical  or  law 
enforcement  purposes. 

(2)  Retain  the  accounting  made  under 

(c) (1),  above,  for  at  least  5  years  after 
the  last  disclosure  or  the  life  of  the  rec¬ 
ord,  whichever  is  longer.  No  record  of 
the  disclosure  of  this  accounting  need 
be  maintained. 

(3)  Upon  request  of  the  individual  to 
whom  the  record  pertains,  make  avail¬ 
able  to  that  individual  all  information 
in  its  accounting  of  disclosures  except 
that  pertaining  to  disclosures  for  law 
enforcement  purposes  pursuant  to 
§  290a.7 (b)(7)  of  this  part. 

(d)  (1)  An  individual’s  name  and  ad¬ 
dress  may  not  be  sold  or  rented  by  an 
element  unless  such  action  is  specifically 
authorized  by  law.  This  provision  shall 
not  be  construed  to  require  the  with¬ 
holding  of  names  and  addresses  other¬ 
wise  permitted  to  be  made  public. 

(2)  Lists  or  compilations  of  names  and 
home  addresses,  or  single  home  addresses 
will  not  be  disclosed,  without  the  con¬ 
sent  of  the  individual  involved,  to  the 
public  including,  but  not  limited  to,  in¬ 
dividual  congressmen,  creditors,  and 
commercial  and  financial  institutions. 
Requests  for  home  addresses  may  be  re¬ 
ferred  to  the  last  known  address  of  the 
individual  for  reply  at  his  discretion  and 
the  requester  will  be  notified  accord¬ 


ingly.  This  prohibition  may  be  waived 
when  circumstances  of  a  case  indicate 
compelling  and  overriding  interests. 

§  290a. 8  Collection  of  personal  infor¬ 
mation  from  individuals. 

(a)  Personal  information  shall  be  col¬ 
lected  to  the  greatest  extent  practicable 
directly  from  the  individual  when  the 
information  may  result  in  adverse  de¬ 
terminations  about  an  individual’s  rights, 
benefits,  and  privileges  under  Federal 
programs.  The  collection  of  information 
from  third  parties  shall  be  minimized. 
Exceptions  to  this  policy  may  be  made 
under  certain  circumstances,  such  as  the 
following : 

( 1 )  There  is  a  need  to  ensure  accuracy 
of  information  supplied  by  an  individual 
by  verifying  with  a  third  party,  such  as 
in  the  case  of  verifying  information  for 
a  security  clearance. 

(2)  The  nature  of  the  information  is 
such  that  it  can  only  be  obtained  from 
a  third  party,  such  as  an  employee’s  per¬ 
formance  in  a  previous  job  or  assign¬ 
ment. 

(3)  Obtaining  the  information  from 
the  individual  would  present  exceptional 
practical  difficulties  or  w’ould  result  in 
unreasonable  cost. 

(b)  Each  individual  who  is  asked  to 
supply  personal  information  must  be 
told  of  the  authority  (statute  or  Execu¬ 
tive  Order)  which  authorizes  its  solici¬ 
tation;  the  principal  purpose  or  purposes 
for  which  it  is  to  be  used;  the  routine 
uses  to  be  made  of  it;  whether  furnish¬ 
ing  such  information  is  mandatory  or 
voluntary;  and  the  effects  on  him,  if  any, 
of  not  providing  it.  This  notice  to  the 
individual  may  be  made  on  the  form 
used  to  collect  the  information  or  on  a 
separate  form  which  can  be  retained  by 
the  individual.  This  advice  must  be  given 
regardless  of  the  media  used  in  request¬ 
ing  information,  whether  it  is  a  “form” 
in  the  usual  sense,  i.e.,  a  preprinted 
document  with  a  control  number  and  an 
edition  date,  or  a  format,  questionnaire, 
survey  sheet,  or  report  rendered  on  a 
blank  sheet. 

(1)  Forms  in  use  before  September  27, 
1975,  which  are  to  be  used  on  and  after 
that  date  must  meet  the  notice  require¬ 
ments  by  use  of  a  separate  statement  to 
accompany  each  form  subject  to  the 
provisions  of  the  Privacy  Act  of  1974. 
The  statement  will  be  assigned  the  iden¬ 
tifying  number  used  in  collecting  the 
information  and  the  suffix  "Privacy  Act 
Statement,”  as  follows: 

(1)  For  forms  in  regularly  issued, 
numbered  series,  the  Privacy  Act  State¬ 
ment  shall  bear  the  same  number  as  the 
form  to  which  it  pertains. 

(ii)  For  unnumbered  formats,  ques¬ 
tionnaires,  survey  forms,  and  reports, 
the  Privacy  Act  Statement  will  bear  the 
report  control  symbol  or  OMB  Approval 
Number  under  the  authority  of  which 
the  information  is  collected  if  applicable. 

(2)  As  forms  are  revised  or  new  ones 
issued,  the  Privacy  Act  Statement  shall 
be  incorporated,  if  practical,  in  the  body 
of  each  form,  format,  questionnaire, 
survey  sheet,  or  report  initiated  or  re¬ 
vised  on  or  after  September  27,  1975. 
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Where  feasible,  the  Privacy  Act  State¬ 
ment  when  incorporated  on  a  form,  for¬ 
mat,  etc.  should  be  positioned  in  such  a 
manner  that  the  individual  will  be  in¬ 
formed  of  the  information  required  by 
the  act  before  he  begins  to  furnish  any 
of  the  information  requested. 

(3)(i)  The  proponent,  i.e.,  the  initi¬ 
ator,  has  the  final  responsibility  for  de¬ 
termining  whether  a  form,  format,  ques¬ 
tionnaire,  survey,  or  report  requires  a 
Privacy  Act  Statement.  Statements 
should  be  sufficiently  complete  and  spe¬ 
cific,  but.  at  the  same  time,  be  concise 
and  couched  in  easily  understood  lan¬ 
guage. 

.'ii>  Forms  and  information  manage¬ 
ment  officers  at  all  echelons  of  DCAA 
must  assure  that  Privacy  Act  Statements 
are  available  and  that  new  forms  con¬ 
tain  the  Statement,  if  required. 

(iii)  No  element  may  deny  any  in¬ 
dividual  any  right,  benefit,  or  privilege 
provided  by  law  because  of  such  in¬ 
dividual’s  refusal  to  disclose  his  SSN, 
unless  such  disclosure  is  required  by 
Federal  statute  or  to  any  element  main¬ 
taining  a  system  of  records  in  existence 
and  operating  before  January  1,  1975,  if 
such  disclosure  was  required  under  stat¬ 
ute  or  regulation  adopted  prior  to  such 
date  to  verify  the  identity  of  an  individ¬ 
ual.  Executive  Order  No.  9397,  Novem¬ 
ber  22,  1943,  authorizes  elements  to  use 
the  SSN  as  a  system  of  numerical  iden¬ 
tification  of  individuals. 

(iv)  Any  DCAA  element  which  re¬ 
quests  an  individual  to  disclose  the  SSN 
must  inform  that  individual  whether 
disclosure  is  mandatory  or  voluntary,  by 
what  statutory  or  other  authority  such 
number  is  solicited,  and  what  uses  will 
be  made  of  it. 

(c)  If  disclosure  of  the  SSN  is  not  re¬ 
quired  by  Federal  statute  or  is  not  for 
a  system  of  records  in  existence  and 
operating  prior  to  January  1, 1975,  DCAA 
elements  are  not  precluded  from  re¬ 
questing  it  from  the  individuals  con¬ 
cerned.  However,  the  separate  Privacy 
Act  Statement  for  the  SSN  alone,  or  a 
merged  Privacy  Act  Statement,  covering 
not  only  the  SSN  but  also  other  items 
of  personal  information,  must  make  clear 
that  the  disclosure  of  the  SSN  is  volun¬ 
tary.  If,  in  such  instances,  the  individual 
refuses  to  disclose  it,  the  element  con¬ 
cerned  must  be  prepared  to  identify  him 
by  alternate  means. 

§  290a,9  Exemptions. 

(a)  The  Director,  DCAA  reserves  the 
right  to  designate  the  systems  of  records 
maintained  by  this  agency  which  are  to 
be  exempted  from  certain  provisions  of 
the  Privacy  Act  of  1974,  and  shall  pub¬ 
lish  in  the  Federal  Register  information 
specifying  the  name  of  each  designated 
system,  the  specific  provisions  of  the  act 
from  which  each  system  is  to  be  ex¬ 
empted,  and  the  reasons  for  each  ex¬ 
emption  of  the  record  system. 

(b)  To  qualify  for  a  general  exemp¬ 
tion,  as  defined  in  the  Privacy  Act  of 
1974,  the  system  of  records  must  be 
maintained  by  an  agency  or  component 
thereof  which  performs  as  its  principal 
function  any  activity  pertaining  to  the 


enforcement  of  criminal  laws,  including 
police  efforts  to  prevent,  control,  or  re¬ 
duce  crime  or  to  apprehend  criminals, 
and  the  activities  of  prosecutors,  courts, 
correctional,  probation,  pardon,  or  parole 
authorities.  Such  system  of  records  must 
consist  of : 

(1)  Information  compiled  for  the  pur¬ 
pose  of  identifying  individual  criminal 
offenders  and  alleged  offenders  and  con¬ 
taining  only  identifying  data  and  nota¬ 
tions  of  arrests,  the  nature  and  disposi¬ 
tion  of  criminal  charges,  sentencing,  con¬ 
finement,  release,  and  parole  and  proba¬ 
tion  status; 

(2)  Information  compiled  for  the  pur¬ 
pose  of  a  criminal  investigation,  includ¬ 
ing  reports  of  informants  and  investi¬ 
gators,  and  associated  with  an  identifi¬ 
able  individual ;  or 

(3)  Reports  identifiable  to  an  indi¬ 
vidual  compiled  at  any  state  of  the  proc¬ 
ess  of  enforcement  of  the  criminal  laws 
from  arrest  or  indictment  through  re¬ 
lease  from  supervision. 

(c)  To  qualify  for  a  specific  exemp¬ 
tion,  as  defined  by  the  Privacy  Act  of 

1974,  the  system  of  records  must  be: 

(1)  Specifically  authorized  under  cri¬ 
teria  established  under  an  Executive 
Order  to  be  kept  classified  in  the  interest 
of  national  defense  or  foreign  policy  and 
are  in  fact  properly  classified  pursuant 
to  such  Executive  Order; 

(2)  Investigatory  material  compiled 
for  law  enforcement  purposes,  other  than 
material  covered  under  a  general  exemp¬ 
tion;  however,  an  individual  shall  not  be 
denied  access  to  information  which  has 
been  used  to  deny  him  a  right  or  privi¬ 
lege  unless  disclosure  would  reveal  a  con¬ 
fidential  source.  The  Security  Officer, 
DCAA,  shall  establish  procedures  govern¬ 
ing  the  granting  of  confidentiality; 

(3)  Maintained  in  connection  with 
providing  protective  service  to  the  Presi¬ 
dent  of  the  United  States  or  other  indi¬ 
viduals  protected  pursuant  to  18  U.S.C. 
3056. 

(4)  Used  only  to  generate  aggregate 
data  or  for  other  similarly  evaluative  or 
analytic  purposes  and  which  are  not  used 
to  make  decisions  on  the  rights,  benefits, 
or  entitlements  of  individuals  except  for 
the  disclosure  of  a  census  record  permit¬ 
ted  by  13  U.S.C.  8. 

(5)  Investigatory  material  compiled 
solely  for  the  purpose  of  determining 
suitability,  eligibility,  or  qualifications 
for  Federal  civilian  employment,  mili¬ 
tary  service,  Federal  contracts,  or  access 
to  classified  information,  but  only  to  the 
extent  that  the  disclosure  c 2  such  mate¬ 
rial  would  reveal  the  identity  of  a  source 
who  furnished  information  to  the  Gov¬ 
ernment  under  an  express  promise  that 
the  identity  of  the  source  would  be  held 
in  confidence,  or  prior  to  September  27, 

1975,  under  an  implied  promise  that  the 
identity  of  the  source  would  be  held  in 
confidence.  The  Security  Officer,  DCAA, 
shall  establish  procedures  governing 
the  granting  of  confidentiality; 

(6)  Testing  or  examination  material 
used  solely  to  determine  individual  qual¬ 
ifications  for  appointment  or  promotion 
in  the  Federal  service,  the  disclosure  of 


which  would  compromise  the  objectivity 
or  fairness  of  the  testing  or  examination 
process;  or 

(7)  Evaluation  material  used  to  deter¬ 
mine  potential  for  promotion  in  the 
Armed  Services,  but  only  to  the  extent 
that  the  disclosure  of  such  material 
would  reveal  the  identity  of  a  source 
who  furnished  information  to  the  Gov¬ 
ernment  und  an  express  promise  that 
the  identity  of  the  source  would  be  held 
in  confidence  or  prior  to  September  27, 
1975,  under  an  implied  promise  that  the 
identity  of  the  source  would  be  held  in 
confidence. 

§  290a.  10  Systems  of  records. 

(a)(1)  Each  DCAA  element  shall 
maintain  in  its  records  systems  only  such 
personal  information  as  is  relevant  and 
necessary  to  accomplish  a  purpose  or 
mission  required  by  statute  or  Executive 
Order  of  the  President. 

(2)  Each  element  shall  Identify  the 
specific  provision  of  law,  or  Executive 
Order,  which  provides  authority  for  the 
maintenance  of  information  in  each  sys¬ 
tem  of  records. 

(3)  Statutory  or  regulatory  authority 
to  establish  and  maintain  a  system  of 
records  does  not  convey  unlimited  au¬ 
thority  to  collect  and  maintain  all  in¬ 
formation  which  may  be  useful  or  con¬ 
venient  to  have.  The  proponent  of  each 
system  of  records  will  evaluate  each 
category  of  information  in  a  system  for 
both  necessity  and  relevance.  In  per¬ 
forming  this  evaluation  the  following 
points  will  be  considered : 

(i)  Relationship  of  each  item  of  in¬ 
formation  to  the  statutory  or  regulatory 
purpose  for  which  the  system  is  main¬ 
tained. 

(ii)  Specific  adverse  consequences  of 
not  collecting  each  category  of  infor¬ 
mation. 

(iii)  Possibility  of  meeting  the  informa¬ 
tion  requirement  through  use  of  infor¬ 
mation  not  individually  identifiable  or 
through  sampling  techniques. 

(iv)  Length  of  time  that  the  informa¬ 
tion  is  needed  and,  where  appropriate, 
techniques  for  purging  parts  of  the 
record. 

(v)  Financial  cost  of  information 
maintenance  compared  to  risk  or  ad¬ 
verse  consequence  of  not  maintaining  it. 

(vi)  Necessity  and  relevance  of  this 
information  to  all  individuals  Included  in 
the  system. 

(4)  Collection  will  be  discontinued  for 
each  category  or  item  of  information 
which  after  the  above  evaluation  does 
not  appear  to  be  reasonably  justifiable. 
Moreover,  such  information  will  be  with¬ 
drawn  and  destroyed  provided  it  can  be 
economically  segregated  from  necessary 
and  relevant  information. 

(5)  The  evaluation  described  above  will 
be  performed  by  each  proponent  of  a 
system  of  records: 

(i)  During  the  design  phase  of  a  new 
system  of  records  or  a  change  in  an  exist- ' 
ing  system  of  records. 

(ii)  Annually,  prior  to  republication 
of  all  system  notices  in  the  Federal 
Register. 
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(b)  (1)  The  Privacy  Act  requires  that  a 
notice  of  the  existence  of  each  system  of 
records,  as  defined  in  5  290a.5  of  this 
part,  be  published  in  the  Federal  Regis¬ 
ter.  Initial  system  notices  will  be  sub¬ 
mitted  to  the  Office  of  the  Assistant  Sec¬ 
retary  of  Defense  (Comptroller)  (OASD 

(C) )  by  the  Records  Administrator. 

(2)  Notices  for  new  systems  must  be 
published  in  the  Federal  Register  for 
public  comment  at  least  30  days  before 
the  system  may  be  legally  implemented. 
The  proposed  notices  shall  be  submitted 
to  the  Records  Administrator  at  least 
90  days  before  the  proposed  implement¬ 
ing  date.  The  Records  Administrator 
shall  submit  the  proposed  system  notices 
to  OASD(C)  60  days  before  the  proposed 
implementing  date. 

(3)  (i)  The  following  proposed  changes 
to  an  existing  system  must  be  published 
in  the  Federal  Register  for  public  com¬ 
ment  at  least  30  days  before  the  changes 
are  implemented: 

(A)  Those  which  expand  the  categories 
of  individuals  on  whom  records  are  main¬ 
tained. 

(B)  Those  which  add  new  categories 
or  records  to  the  system. 

(C)  Those  which  add  new  categories 
to  the  sources. 

(D)  New  or  changed  routine  uses 
which  involve  disclosure  to  a  new  cate¬ 
gory  of  recipient. 

(E)  Changes  in  procedures  governing 
access. 

(ii)  Notices  of  proposed  changes  to 
existing  systems  will  be  submitted  to  the 
Records  Administrator  90  days  before 
implementation. 

(4)  Changes  in  records  systems  not 
stated  in  c3)  (i) ,  above,  do  not  require 
advance  publication,  but  must  be  sub¬ 
mitted  for  inclusion  in  the  annual  con¬ 
solidated  listing  of  records  systems.  Ac¬ 
cordingly,  each  DCAA  element  shall  es¬ 
tablish  procedures  to  ensure  that  all  such 
changes  are  forwarded  to  the  Records 
Administrator  by  May  1  of  each  year  for 
submission  to  the  Office  of  the  Assistant 
Secretary  of  Defense  (Comptroller)  by 
May  31  for  annual  publication  in  the 
Federal  Register. 

(5)  Concurrently  with  (3)  and  (4), 
above,  the  Office  of  the  Assistant  Secre¬ 
tary  of  Defense  (Comptroller)  shall  pro¬ 
vide  the  Office  of  Management  and 
Budget  and  the  Privacy  Protection 
Study  Commission  advance  notice  of 
proposals  to  establish  new  systems  or  to 
change  routine  uses  of  existing  systems. 

(6)  The  Records  Administrator  shall 
ensure  that  information  contained  in 
each  system  notice,  as  published  in  the 
Federal  Register,  is  incorporated  in 
DCAA  Manual  5015.1,  Files  Maintenance 
and  Disposition.  DCAA  elements  shall 
take  immediate  action  to  either  publish 
a  system  notice,  or  discontinue  any  sys¬ 
tem  of  records  not  contained  in  the  Files 
Maintenance  and  Disposition  Manual. 

(c) (1)  Records  used  by  DCAA  ele¬ 
ments  in  making  determinations  about 
an  individual  will  be  maintained  with 
such  accuracy,  relevance,  timeliness,  and 
completeness  as  is  reasonably  necessary 
to  ensure  fairness  to  the  individual  in 
any  determination. 


(2)  Prior  to  disseminating  any  record 
about  an  individual  to  any  person  other 
than  a  Federal  agency,  unless  the  dis¬ 
semination  is  made  pursuant  to  the  Free¬ 
dom  of  Information  Act,  reasonable  ef¬ 
forts  will  be  made  to  ensure  that  such 
records  are  accurate,  complete,  timely, 
and  relevant  for  agency  purposes. 

(d)  Maintenance  of  a  system  of  rec¬ 
ords  describing  how  individuals  exercise 
rights  guaranteed  by  the  First  Amend¬ 
ment  is  prohibited  unless  expressly  au¬ 
thorized  by  Federal  statute  or  by  the  in¬ 
dividual  concerned,  unless  pertinent  to 
and  within  the  scope  of  an  authorized 
law  enforcement  activity.  The  exercise 
of  these  rights  includes,  but  is  not  lim¬ 
ited  to,  religious  and  political  beliefs, 
freedom  of  speech  and  the  press,  and 
the  right  of  assembly  and  to  petition. 

(e)  The  head  of  each  DCAA  element 
shall  assure  that  persons,  including  Gov¬ 
ernment  contractors  or  their  employees, 
involved  in  the  design,  development,  op¬ 
eration,  maintenance,  or  control  of  any 
system  of  records,  as  defined  in  §  290a.5, 
are  informed  of  all  requirements  to  pro¬ 
tect  the  privacy  of  the  individuals  who 
are  subjects  of  the  records.  The  follow¬ 
ing  sanctions  should  be  emphasized  to 
personnel : 

(1)  There  are  criminal  penalties  for 
knowingly  and  willfully  disclosing  a  rec¬ 
ord  about  an  individual  without  the 
written  consent  or  the  written  request 
of  that  individual,  or  unless  disclosure 
is  for  one  of  the  reasons  listed  in  §  290a.7 

(2)  The  agency  may  be  subject  to  civil 
suit  for  failure  to  comply  with  the  pri¬ 
vacy  Act  of  1974. 

(f) (1)  Each  DCAA  element  shall  es¬ 
tablish  administrative  and  physical  safe¬ 
guards  to  protect  each  system  of  records 
from  unauthorized  or  unintentional  ac¬ 
cess,  disclosure,  modification,  or  destruc¬ 
tion.  These  safeguards  shall  apply  to  sys¬ 
tems  of  records,  in  whatever  medium  in 
which  personal  information  is  processed 
or  stored.  Such  safeguards  shall  be  tai¬ 
lored  to  the  requirements  of  each  system 
of  records. 

(2)  Access  to  personal  information 
shall  be  restricted  to  those  persons  whose 
official  duties  require  access  and  the  in¬ 
dividual  concerned  and  in  accordance 
with  8  290a. 7. 

(3)  Each  DCAA  element  shall  ensure 
that  all  persons  whose  official  duties  re¬ 
quire  access  to  or  processing  and  mainte¬ 
nance  of  personal  information  are 
trained  in  the  proper  safeguarding  and 
use  of  such  information. 

(4)  Personal  records  and  documents 
shall  be  stored  so  as  to  reasonably  pre¬ 
clude  unauthorized  disclosure. 

(5)  Disposal  of  records  containing 
personal  information  which  are  no 
longer  required  will  be  accomplished  in 
such  a  manner  that  will  prevent  the  con¬ 
tents  from  being  disclosed,  e.g.,  tearing 
the  record  into  pieces  to  prevent  recon¬ 
struction,  burning,  or  in  the  case  of 
magnetic  tapes,  by  degaussing. 

§  290.1 1  Annual  report. 

(a)  Each  DCAA  Region  shall  prepare 
an  annual  report  for  the  preceding  cal¬ 
endar  year  on  its  Implementation  of  the 
Privacy  Act. 


(b)  Seven  copies  of  the  report  shall  be 
furnished  to  the  Records  Administrator 
by  March  15  of  each  year  for  transmittal 
in  six  copies  to  the  OASD(C)  by 
March  31  of  each  year. 

(c)  The  annual  report  shall  contain 
the  following: 

(1)  A  brief  management  summary  of 
the  status  of  actions  taken  to  comply 
with  the  act,  the  results  of  these  efforts, 
any  problems  encountered  and  recom¬ 
mendations  for  any  changes  in  legisla¬ 
tion,  policies,  or  procedures. 

(2)  A  summary  of  major  accomplish¬ 
ments;  i.e.,  improvements  in  information 
practices  and  safeguards. 

(3)  A  summary  of  major  plans  for  ac¬ 
tivities  in  the  upcoming  year,  e.g.,  area 
of  emphasis,  additional  securing  of  fa¬ 
cilities. 

(4)  A  list  of  systems  which  are  ex¬ 
empted  during  the  year  from  any  of  the 
operative  provisions  of  this  law  per¬ 
mitted  under  the  terms  of  subsections 
(j)  and  (k)  of  the  Privacy  Act  of  1974, 
whether  or  not  the  exemption  was  ob¬ 
tained  during  the  year,  the  number  of 
records  in  each  system  exempted  from 
each  specific  provision  and  reasons  for 
invoking  the  exemption. 

(5)  A  brief  summary  of  changes  to  the 
total  inventory  of  personal  data  systems 
subject  to  the  provisions  of  the  act.  in¬ 
cluding  reasons  for  major  changes,  e.g., 
the  extent  to  which  review  of  the  rele¬ 
vance  of  and  necessity  for  records  has 
resulted  in  elimination  of  all  or  portions 
of  systems  of  records  or  any  reduction  in 
the  number  of  individuals  on  whom  rec¬ 
ords  are  maintained. 

(6)  A  general  description  of  opera¬ 
tional  experiences  including  estimates  of 
the  number  of  individuals  (in  relation  to 
the  total  number  of  records  in  the  sys¬ 
tem)  requesting  information  on  the 
existence  of  records  pertaining  to  them, 
refusing  to  provide  Information,  re¬ 
questing  access  to  their  records,  appeal¬ 
ing  initial  refusals  to  amend  records,  and 
seeking  redress  through  the  courts. 

(7)  Any  available  data,  or  estimates, 
of  the  cost  of  administering  the  Privacy 
Act  of  1974. 

B.  B.  Lywn, 

Director,  Defense 
Contract  Audit  Agency. 

August  8,  1975. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives  OASD  (Comptroller) . 
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Defense  Intelligence  Agency 
[  32  CFR  Part  292a  ] 

PRIVACY  ACT  OF  1974 
Notice  of  Proposed  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (Pub.  L.  93-579;  88  Stat.  1896,  5 
U.S.C.  552a)  which  requires  each  Fed¬ 
eral  Agency  that  maintains  any  systems 
of  records  as  defined  in  the  statute  to 
promulgate  rules  pursuant  to  the  provi¬ 
sions  of  the  Act.  The  Director,  Defense 
Intelligence  Agency  has  approved  the 
following  change  of  Part  292  as  shown 


FEDERAL  REGISTER,  VOL.  40,  NO.  165 — TUESDAY,  AUGUST  26,  1975 


37510 


PROPOSED  RULES 


below  in  order  to  implement  the  Privacy 
Act. 

Notice  is  hereby  given  that  the  De¬ 
fense  Intelligence  Agency  proposes  to 
change  32  CFR  292  by  adding  Part  292a, 
Eub  parts  A  and  B  to  implement  the  pro¬ 
visions  of  the  Privacy  Act  of  1974.  Sub- 
part  A  establishes  proposed  regulations 
for  the  protection  of  personal  privacy  of 
individuals  identified  in  records  main¬ 
tained  by  the  Defense  Intelligence 
Agency.  Subpart  A  also  implements  the 
Department  of  Defense  Directive  which 
applies  to  all  Department  of  Defense 
components.  The  Defense  Intelligence 
Agency  regulation,  in  the  proposed  Part 
32  CFR,  292a,  Subpart  A,  applies  to  all 
Defense  Intelligence  Agency  activities. 
Significant  portions  of  Subpart  A  pro¬ 
vide  the  procedure  for  requests  for  in¬ 
formation,  access  to  and  disclosure  of 
records,  and  the  actions  taken  by  the  De¬ 
fense  Intelligence  Agency  in  response  to 
such  requests.  The  regulation  further 
contains  provisions  for  accounting  for 
disclosures  made,  and  requests  for 
amendment  of  a  record  and  appeal  from 
refusal  to  amend  a  record. 

In  addition,  sections  5  U.S.C.  552a3(j) 
and  3(k)  authorize  an  agency  head  to 
exempt  certain  systems  of  records  or 
parts  of  certain  systems  from  some  of  the 
requirements  of  the  Act. 

The  regulations  reserve  to  the  Direc¬ 
tor,  Defense  Intelligence  Agency,  as  head 
of  an  agency,  the  right  to  create  exemp¬ 
tions  pursuant  to  the  exemption  provi¬ 
sions  of  the  Act.  Subpart  B  contains 
those  general  and  specific  exemptions 
proposed  by  the  Defense  Intelligence 
Agency. 

Any  person  Interested  in  the  rules  pro¬ 
posed  herein  may  participate  in  this  pro¬ 
posed  rulemaking  by  submitting,  either 
in  person  or  through  the  mail,  written 
data,  views,  or  arguments  to  the  Defense 
Intelligence  Agency,  ATTN:  SC  (PA 
1974),  The  Pentagon,  Washington,  D.C. 
20301  on  or  before  27  September  1975. 

This  proposal  will  apply  to  other  pos¬ 
sible  systems  of  records  set  up  in  the  fu¬ 
ture,  as  applicable. 

Therefore,  pursuant  to  5  U.S.C.  553, 
Subsections  3  and  4  of  the  Administra¬ 
tive  Procedures  Act,  and  to  the  Privacy 
Act  of  1974,  Title  32  of  the  Code  of  Fed¬ 
eral  Regulations,  Part  292a  is  proposed 
as  set  forth  below: 

PART  292a— PRIVACY  ACT  OF  1974 

Sub  part  A — Implementation  of  the  Privacy  Act  of 
1974 

Sec. 

292a.  1  Purpose. 

292a. 2  References. 

292a.3  Applicability. 

292a.4  Policy. 

292a.5  Requests  for  records  procedures. 
292a.6  Schedule  of  fees. 

292a. 7  Disclosure  of  records. 

292a.8  Deputy  Directors’  responsibilities 
for  accounting  for  certain  dis¬ 
closures. 

292a .9  Individual  request  for  amendment 
of  personal  Information. 

292a.l0  DIA  requirements. 

292a.  11  Privacy  Act  exemptions. 

292a. 12  Appeal  for  refusal  to  amend  or  re¬ 
lease  a  record. 

292a.  13  Responsibilities. 

292a. 14  DIA  Privacy  Act  officer. 


Sec. 

292a.l5  Safeguarding  personal  Information 
In  records  systems. 

292a. 16  Disposition  and  destruction. 

292a. 17  System  of  records  content. 

292a.  18  Annual  report  requirements. 

292a.l9  Agency  fees  for  duplication  under 
the  Privacy  Act  of  1974. 

292a.20  Federal  Register  annual  notice. 

292a  .21  Rules  of  conduct. 

Subpart  B — Exemptions 
292a.22  General  Information. 

292a.23  Specific  exemptions. 

Authokitt:  5  U.S.C.  522a  (f),  (J),  and  (k). 

Subpart  A — Implementation  of  the  Privacy 
Act  of  1974 

§  292a.  1  Purpose. 

To  implement  the  “Privacy  Act  of 
1974,”  5  U.S.C.  552a  and  DoD  Directive 
5400.11,  “Personal  Privacy  and  Rights  of 
Individuals  Regarding  Their  Personal 
Records,”  within  the  DIA  and  outline 
policy  and  procedures  governing  the  re¬ 
lease  of  information  maintained  in  rec¬ 
ords  on  individuals  (a  U.S.  citizen  or  an 
alien  lawfully  admitted  for  permanent 
residence). 

§  292a. 2  References. 

(a)  5  U.S.C.  552a  (Privacy  Act  of 
1974). 

(b)  5  U.S.C.  552  (Freedom  of  Informa¬ 
tion  Act) . 

(c)  13  U.S.C.  section  8. 

(d)  18  U.S.C.  section  3056. 

(e)  DoD  Directive  5400.9,  “Publication 
of  Proposed  and  Adopted  Regulations 
Affecting  the  Public,”  23  December  1974. 

(f)  DOD  Directive  5400.11,  “Personal 
Privacy  and  Rights  of  Individuals  Re¬ 
garding  Their  Personal  Records,”  4  Au¬ 
gust  1975. 

(g)  DoD  5200. 1-R,  “Information  Se¬ 
curity  Program  Regulation,”  November 
1973. 

(h)  DoD  Directive  5400.7,  “Availabil¬ 
ity  to  the  Public  of  Department  of  De¬ 
fense  Information,”  14  February  1970. 

(i)  DoD  Directive  7650.1,  “General  Ac¬ 
counting  Office,  Comprehensive  Audits,” 
9  July  1958. 

(j)  Federal  Personnel  Manual. 

(k)  Executive  Order  9397,  22  Novem¬ 
ber  1943. 

(l)  DIAR  12-27,  “Control  and  Protec¬ 
tion  of  ‘For  Official  Use  Only’  Informa¬ 
tion.” 

(m)  DIAR  12-39,  “Availability  to  the 
Public  of  Department  of  Defense  Infor¬ 
mation.” 

§  292a. 3  Applicability. 

This  regulation  applies  to  all  DIA  ele¬ 
ments  and  governs  the  collection,  use, 
maintenance,  storage,  destruction, 
amendment,  appeal  procedures,  and  re¬ 
lease  of  records  containing  personal  in¬ 
formation.  This  regulation  is  effective  27 
September  1975. 

§  292a. 4  Policy. 

Upon  receipt  of  a  written  request,  the 
DIA  will  release  to  individuals  those  rec¬ 
ords  or  reasonably  segregable  portions  of 
records  which  are  rightfully  information 
which  is  releasable  and  applicable  to  the 
individual  making  the  request.  Generally, 
information,  other  than  that  exempted 


in  §  292a. 11,  will  be  provided  to  the  in¬ 
dividual. 

(a)  In  determining  whether  documen¬ 
tary  material  qualifies  as  a  “record,”  5 
U.S.C.  552a  will  be  used  as  a  guide.  The 
statute  defines  the  term  “record”  as: 
“Any  item,  collection,  or  grouping  of  in¬ 
formation  about  an  individual  that  is 
maintained  by  an  agency,  including,  but 
not  limited  to,  his  education,  financial 
transactions,  medical  history,  criminal 
or  employment  history,  and  that  contains 
his  name,  or  an  identifying  number, 
symbol  or  other  identifying  particular 
assigned  to  the  individual,  such  as  a 
finger  or  voice  print  or  a  photograph.” 
The  applicability  of  the  Privacy  Act 
of  1974  depends  on  the  existence  of  an 
identifiable  record. 

(b)  Records  include  data  on  individ¬ 
uals  stored  in  computers. 

(c)  Initial  availability,  releasability, 
and  cost  determinations  will  normally 
be  made  within  10  working  days  of  the 
date  on  which  a  written  request  for  any 
identifiable  record  is  received  by  DIA 
and  acknowledgment  sent  to  the  indi¬ 
vidual.  If.  due  to  unusual  circumstances, 
additional  time  is  needed,  a  written  no¬ 
tification  of  the  delay  will  be  forwarded 
to  the  requester  within  the  10  working- 
day  period.  This  notification  will  briefly 
explain  the  circumstances  for  the  delay 
and  indicate  the  anticipated  date  for  a 
substantive  response.  Normally,  access  to 
records  or  a  copy  will  be  provided  within 
30  working  days  of  receipt  of  the  request. 

(d)  Records  containing  information/ 
documents  provided  by  another  agency 
will  not  be  released.  The  individual  will 
be  notified  that  a  request  should  be  sent 
to  that  identified  agency  concerning  in¬ 
formation  in  our  records  obtained  from 
other  agencies. 

(e)  In  addition  to  the  provisions  of  the 
Privacy  Act  and  DoD  Directive,  5400.11, 
the  instructions  issued  by  an  activity 
responsible  for  a  system  of  records  (i.e., 
Civil  Service  Commission)  will  be  com¬ 
plied  with  in  granting  access  to  such 
records. 

§  292a. 5  Requests  for  reeord  proee- 
dures. 

(a)  Requests  to  obtain  copies  of  rec¬ 
ords  or  reasonably  segregable  portions 
thereof  must  be  made  in  writing. 
The  request  should  contain  at  least  the 
following  information: 

(1)  Reasonable  identification  includ¬ 
ing  the  first  name,  middle  name,  or  ini¬ 
tial,  surname,  date  of  birth,  and  social 
security  number  (SSN)  of  the  Individual 
concerned.  If  known.  Where  the  sensi¬ 
tivity  of  the  data  warrants  it,  a  signed 
notarized  statement  may  be  required  to 
verify  identification. 

(2)  Request  should  state  that  what¬ 
ever  cost  is  involved  is  acceptable  or  ac¬ 
ceptable  up  to  a  specified  limit. 

(b)  Requests  for  records  review  where 
the  Individual  will  be  accompanied  by 
a  person  of  his  own  choosing,  must  fur¬ 
nish  a  written  statement  authorizing 
discussion  of  the  individual’s  record  in 
the  accompanying  person’s  presence. 

(c)  Individuals  desiring  records  should 
direct  inquiry  to: 
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Defense  Intelligence  Agency,  ATTN:  SC(PA 

1974) ,  Washington,  D.C.  20301. 

(d)  Personnel  of  DIA,  both  civilian  and 
military,  have  always  had  the  preroga¬ 
tive  to  review  and  annually  update  their 
personnel  flies,  and  correct  administra¬ 
tive  errors  thereto.  This  regulation  does 
not  change  or  alter  in  any  way  nor  does 
it  impose  any  requirement  in  contradic¬ 
tion  of  those  in  existence  concerning  re¬ 
view  and  annually  updating,  except 
when  a  prohibition  may  exist  which  is 
invalidated  by  the  Privacy  Act  of  1974 
and  this  regulation. 

(e)  This  regulation  does  not  require 
that  a  record  be  created  or  that  an  indi¬ 
vidual  be  given  access  to  records  which 
are  not  retrieved  by  name  or  other  in¬ 
dividual  identifier. 

(f)  If  providing  a  copy  is  the  only 
means  whereby  access  to  the  record  can 
be  accomplished,  reproduction  fees  will 
not  be  assessed.  This  applies  when  a 
copy /extract  must  be  made  in  order  to 
delete  information  contained  in  Uie 
record  pertaining  to  another  individual 
or  under  the  exemptions  in  §  292a.  11. 

(g)  The  individual  requesting  access 
does  not  have  to  justify  a  need  to  gain 
access. 

(h)  An  individual  will  not  be  denied 
access  to  his  file  or  record  for  refusing 
to  disclose  his  SSN  unless  the  disclosure 
of  the  SSN  is  required  by  statute  or  by 
regulation  adopted  prior  to  1  January 
1975. 

(i)  Individuals  may  not  be  denied 
access  to  a  record  pertaining  to  them¬ 
selves  because  those  records  are  ex¬ 
empted  from  disclosure  under  the  Free¬ 
dom  of  Information  Act. 

(j)  Any  request  from  an  individual  for 
access  to  or  for  copies  of  his  own  records 
will  be  processed  in  accordance  with  this 
regulation  and  not  the  Freedom  of  In¬ 
formation  Act. 

§  292a.6  Schedule  of  fees. 

Fees  will  be  collected  only  for  making 
copies  of  records  but  not  for  costs  of 
search  and  review  of  the  record. 

(a)  Fees  will  not  be  waived  except 
when: 

(1)  Payment  of  the  full  costs  or  fee 
would  not  be  in  the  interest  of  the  pro¬ 
gram.  Employees,  currently  in  status 
with  DIA,  will  not  be  charged  for  the 
first  copy  of  a  record  provided  by  the 
Agency. 

(2)  Ordered  by  a  court  to  amend  the 
record. 

(3)  DIA  makes  a  copy  of  the  record 
as  a  necessary  part  of  the  review  process 
in  determining  availability  of  the  record 
or  parts  thereof  for  release  to  the  sub¬ 
ject. 

(b)  Normally,  collection  of  fees  will  be 
made  at  the  time  of  conveying  the  copy 
of  the  record.  In  some  instances  fees  will 
be  paid  in  advance.  In  the  absence  of 
an  agreement  to  pay  required  anticipated 
costs,  the  time  for  responding  to  a  re¬ 
quest  begins  on  resolution  of  this  agree¬ 
ment  to  pay. 

(c)  The  schedule  of  fees  chargeable  is 
contained  in  §  2 92a.  19. 

(d)  Remittances  will  be  by  personal 
check,  bank  draft  on  a  U.S.  bank  or  by 


U.S.  postal  money  order  made  payable  to 
“The  Defense  Intelligence  Agency.”  Re¬ 
mittances  will  be  forwarded  to  the  office 
designated  in  §  292a.5(c). 

§  292a.7  Disclosure  of  records. 

The  DIA  will  not  disclose  any  record 
to  any  person  or  agency  except  by  writ¬ 
ten  request  or  prior  written  consent  of 
the  subject  of  the  record  unless  the  dis¬ 
closure  of  the  record  is  required  by  law 
or  by  the  following: 

(a)  Officers  and  employees  of  the  DIA 
and  DoD  who  either  maintain  the  record 
and/or  have  a  need  for  the  record  in  the 
performance  of  their  duties. 

(b)  Required  under  5  U.S.C.  552  (the 
Freedom  of  Information  Act). 

(c)  Routine  use  which  is  compatible 
with  the  purpose  for  which  the  record 
was  collected. 

(d)  Bureau  of  the  Census  pursuant  to 
the  provisions  of  Title  13  for  purposes 
of  planning  or  carrying  out  a  census,  sur¬ 
vey,  or  related  purpose. 

(e)  A  recipient  who  has  provided  the 
agency  with  advance  adequate  written 
assurance  that  the  record  will  be  used 
solely  as  a  statistical  research  or  report¬ 
ing  record  and  that  the  record  is  to  be 
transformed  in  a  form  that  is  not  in¬ 
dividually  identifiable. 

(f)  National  Archives  of  the  United 
States  as  a  record  having  sufficient  his¬ 
torical  or  other  value  to  warrant  its  con¬ 
tinued  preservation  by  the  UJS.  Gov¬ 
ernment,  or  by  evaluation  by  the  Admin¬ 
istrator  of  General  Services  or  his 
designee  to  determine  whether  the  rec¬ 
ord  has  such  value. 

(g)  Another  agency  or  instrumentality 
of  any  governmental  jurisdiction  within 
or  under  the  control  of  the  United  States 
or  a  civil  or  criminal  law 'enforcement 
activity  if  such  is  authorized  by  law  and 
if  the  head  of  the  agency,  or  instru¬ 
mentality  has  made  a  written  request 
to  the  DIA  specifying  the  particular  por¬ 
tion  desired  and  the  law  enforcement 
activity  for  which  the  record  is  required. 

(h)  A  person  showing  a  compelling 
circumstance  affecting  the  health  or 
safety  of  an  individual  if  upon  such  dis¬ 
closure  notification  is  transmitted  to  the 
last  known  address  of  the  subject. 

(i)  Either  House  of  Congress  or  to 
congressional  committees  having  juris¬ 
diction  in  a  specific  matter. 

(j)  The  Comptroller  General  or  au¬ 
thorized  representatives  in  the  course  of 
the  performance  of  duties  of  the  General 
Accounting  Office. 

(k)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction. 

§  292a. 8  Deputy  Directors*  responsibili¬ 
ties  for  accounting  for  certain  dis¬ 
closures. 

(a)  Except  for  disclosures  made  under 
§  292a.7  (a)  and  (b),  maintain  an  accu¬ 
rate  accounting  of : 

(l)  Date,  nature,  and  purpose  of  each 
disclosure  of  a  record  to  any  person  or 
agency  under  §  292a.7  (c)  through  (k). 

(2)  Name  and  address  of  the  person  or 
agency  to  whom  the  disclosure  is  made. 

(b)  Retain  the  accounting  of  disclo¬ 
sures  for  at  least  5  years  or  the  life  of  the 
record,  whichever  is  longer. 


(c)  The  accounting  of  disclosures  will 
be  available  for  review  by  the  subject  at 
his  request  except  for  disclosures  made 
under  §  292a.7  (a)  and  (g).  A  separate 
disclosure  form  will  be  kept  for  actions 
specified  in  §  292a.7(g) . 

(d)  Inform  any  person  or  agency  of 
any  correction  or  notation  of  dispute 
made  by  the  DIA  in  accordance  with 
procedures  of  §  292a.l0(c)  if  an  account¬ 
ing  of  the  disclosure  was  made. 

(e)  A  form  (which  will  be  published 
later)  need  not  be  used  for  the  account¬ 
ing  of  disclosures  provided  that  the  office 
can  construct  from  its  system  a  document 
listing  all  disclosures  for  an  individual 
record.  For  example,  payroll,  tax,  bond, 
social  security,  retirement,  and  similar 
records  transferred  to  the  proper  office 
outside  the  Agency  do  not  require  the 
separate  accounting  form,  provided  that 
the  accounting  may  be  reconstructed 
when  requested  by  the  individual  or  when 
necessary  to  inform  previous  recipients  of 
any  corrected  or  disputed  information. 

§  292a.9  Individual  request  for  amend¬ 
ment  of  personal  information. 

(a)  An  individual  may  request,  either 
in  person  or  through  the  mail,  that  his 
record  be  amended;  however,  such  re¬ 
quest  will  be  made  in  writing  and  ad¬ 
dressed  to: 

Defense  Intelligence  Agency,  ATTN:  SC  (PA 

1974),  Washington,  D.C.  20301. 

Requests  should  contain  as  a  minimum, 
identifying  information  to  locate  the  rec¬ 
ord,  a  description  of  the  items  to  be 
amended  and  the  reason  amendment  is 
being  requested.  A  request  will  not  be 
rejected  or  required  to  be  resubmitted 
unless  additional  information  is  essential 
to  process  the  request.  Incomplete  or  in¬ 
accurate  requests  will  not  be  rejected 
categorically;  the  individual  will  be  asked 
to  clarify  the  request  as  needed.  Individ¬ 
uals  will  be  required  to  provide  verifica¬ 
tion  of  identity  as  in  §  292a.5(a)  (1)  to 
assure  that  the  requester  is  seeking  to 
amend  records  pertaining  to  him  and  not, 
inadvertently  or  intentionally,  the  rec¬ 
ords  of  another  individual.  A  written  re¬ 
quest  is  not  required  when  individuals 
indicate  amendments  during  routine  an¬ 
nual  review  and  updating  of  records  pro¬ 
grams  conducted  by  the  Agency  for  civil¬ 
ian  personnel  and  the  Services  for 
military  personnel. 

(b)  A  written  acknowledgment  of  the 
receipt  of  a  request  for  amendment  of  a 
record  must  be  provided  to  the  individual 
within  10  working  days  (excluding  Satur¬ 
days,  Sundays,  and  legal  public  holidays) 
after  receipt  by  the  proper  office.  The  ac¬ 
knowledgment  will  clearly  Identify  the 
request  and  advise  the  individual  when 
he  may  expect  to  be  advised  of  action 
taken  on  the  request.  Whenever  practi¬ 
cable,  the  decision  will  be  made  within 
30  working  days.  No  separate  acknowl¬ 
edgment  of  receipt  is  necessary  if  the 
request  can  be  either  approved  or  denied, 
and  the  individual  advised  within  the  10- 
day  period.  For  requests  presented  in  per¬ 
son,  written  acknowledgment  may  be 
provided  at  the  time  the  request  is  pre¬ 
sented.  The  annual  report  will  indicate 


FEDERAL  REGISTER,  VOL.  40,  NO.  166 — TUESDAY,  AUGUST  26,  1975 


37512 


PROPOSED  RULES. 


the  number  of  cases  which  DIA  was  un¬ 
able  to  complete  within  the  30-day 
requirement. 

(c)  If  the  DIA  agrees  with  any  portion 
or  all  of  the  individual’s  request  to  amend 
a  record,  the  Agency  will  promptly  advise 
the  individual  and  amend  the  record  ac¬ 
cordingly.  If  a  disclosure  accounting  has 
been  made,  the  DIA  will  advise  all  pre¬ 
vious  recipients  of  tl\e  record  that  the 
amendment  has  been  made  and  the  sub¬ 
stance  of  the  correction 

(d)  If  DIA  disagrees  with  all  or  any 
portion  of  a  request  to  amend  a  record, 
it  will  promptly: 

(1)  Advise  the  individual  of  its  refusal 
and  the  reasons  therefor; 

(2)  Inform  the  individual  that  he  may 
request  a  further  review  by  the  Director, 
DIA,  or  his  designee;  and 

(3)  Describe  the  procedures  for  re¬ 
questing  such  a  review,  including  the 
name  and  address  of  the  official  to  whom 
the  request  should  be  directed  as  con¬ 
tained  in  §  292a. 12. 

(e)  A  review  of  the  initial  refusal  to 
amend  a  record  will  be  made  if  requested 
by  the  individual. 

(1)  The  Director  (DR),  DIA,  or  his 
official  designee  will  make  a  review  of  the 
initial  determination. 

(2)  If,  after  conducting  the  review,  the 
reviewing  official  also  refuses  to  amend 
the  record  in  accordance  with  the  in¬ 
dividual’s  request,  the  individual  will  be 
notified: 

(i)  Of  the  refusal  and  the  reasons 
therefor. 

(ii)  Of  the  right  to  file  a  concise  state¬ 
ment  of  reasons  for  disagreeing  with  the 
decision  of  the  Agency. 

(iii)  That  he  may  file  a  statement  of 
disagreement;  and  that  such  statement 
will  be  made  available  to  anyone  to  whom 
the  record  is  subsequently  disclosed. 
Statements  should  be  addressed  as  in 
§  292a. 9(a) . 

(iv)  That  prior  recipients  of  the  dis¬ 
puted  record  will  be  provided  a  copy  of 
the  statement  of  disagreement  to  the  ex¬ 
tent  that  an  accounting  of  disclosures  is 
maintained. 

(v)  Of  his  right  to  seek  judicial  review 
of  the  Agency’s  refusal  to  amend  a  record. 

(3)  If  the  reviewing  official  determines 
that  the  record  should  be  amended  in  ac¬ 
cordance  with  the  request,  the  DIA  will 
amend  the  record,  advise  the  individual, 
and  inform  previous  recipients  where 
an  accounting  of  disclosure  has  been 
maintained. 

(4)  A  final  determination  on  the  in¬ 
dividual’s  request  for  a  review  of  an  ini¬ 
tial  refusal  to  amend  a  record  must  be 
completed  within  30  working  days  after 
receipt  by  the  proper  office  unless  the  Di¬ 
rector,  DIA,  determines  that  a  fair  and 
equitable  review  cannot  be  completed  in 
that  time.  If  additional  time  is  required, 
the  individual  will  be  informed  in  writ¬ 
ing  of  the  reasons  for  the  delay  and  of 
the  approximate  date  on  which  the  re¬ 
view  is  expected  to  be  completed. 

(f)  When  an  Individual  files  a  state¬ 
ment  of  dispute,  the  DIA  will  clearly  an¬ 
notate  the  record  so  that  the  dispute  Is 
apparent  to  anyone  who  may  subse¬ 
quently  grant  access  to,  use  or  disclose 


the  record.  The  notation  itself  will  be 
integral  to  the  record.  Where  an  account¬ 
ing  of  disclosure  has  been  made,  the 
Agency  will  advise  previous  recipients 
that  the  record  has  been  disputed  and 
will  provide  a  copy  of  the  individual’s 
statement. 

(1)  The  individual’s  statement  of  dis¬ 
pute  need  not  be  filed  as  an  integral  part 
of  the  record  to  which  it  pertains.  It  will, 
however,  be  maintained  in  such  a  man¬ 
ner  as  to  permit  ready  retrieval  whenever 
the  disputed  portion  of  the  record  is  to 
be  disclosed.  When  information  which  is 
the  subject  of  a  statement  of  dispute  is 
subsequently  disclosed,  the  DIA  will  note 
which  information  is  disputed  and  pro¬ 
vide  a  copy  of  the  individual’s  statement. 

(2)  DIA  may  include  a  brief  summary 
of  its  reasons  for  not  making  an  amend¬ 
ment  when  disclosing  disputed  informa¬ 
tion.  Summaries  normally  will  be  limited 
to  the  reasons  stated  to  the  individual. 
The  summary  will  be  treated  as  part  of 
the  individual’s  record;  however,  it  will 
not  be  subject  to  the  amendment  proce¬ 
dures. 

§  292a. 10  DIA  requirements. 

(a)  Maintain  in  the  records  only  such 
information  about  an  individual  as  is 
relevant  and  necessary  to  accomplish  a 
purpose  required  by  statute  or  by  Execu¬ 
tive  Order  of  the  President. 

(b)  Collect  information  to  the  great¬ 
est  extent  practicable  directly  from  the 
subject  individual  when  the  information 
may  result  in  adverse  determination 
about  an  individual’s  rights,  benefits,  and 
privileges  under  Federal  programs. 

(c)  Inform  each  individual,  who  is  re¬ 
quested  to  provide  information  of:  (DIA 
Form  973,  Standardized  Privacy  Act 
Statement,  will  be  used  to  fulfill  these 
requirements  during  the  interim  phase) . 

(1)  The  authority  (statute,  Executive 
Order  or  Agency  Directive/Regulation) 
which  authorizes  the  solicitation  of  the 
information  and  whether  disclosure  of 
such  information  is  mandatory  or  vol¬ 
untary. 

(2)  The  principal  purpose  for  which 
the  information  will  be  used. 

(3)  The  routine  use  which  may  be 
made  of  the  information  as  published  in 
the  Federal  Register. 

(4)  The  effects  on  him,  if  any,  of  not 
providing  all  or  any  part  of  the  requested 
information. 

(d)  Publish  in  the  Federal  Register 
at  least  annually  a  notice  of  the  existence 
and  character  of  the  system  of  records. 

(e)  Maintain  all  records  which  are 
used  by  the  DIA  in  making  any  determi¬ 
nation  about  any  individual  with  such 
accuracy,  relevance,  timeliness,  and  com¬ 
pleteness  as  is  reasonably  necessary  to 
assure  fairness  to  the  individual. 

(f)  Prior  to  disseminating  any  record 
about  an  individual  to  any  person  other 
than  an  agency,  unless  the  dissemination 
is  made  pursuant  to  5  U.S.C.  552,  make 
reasonable  efforts  to  assure  that  such 
records  are  accurate,  complete,  timely, 
and  relevant  for  DIA  purposes. 

(g)  Maintain  no  record  describing  how 
any  individual  exercises  rights  guaran¬ 
teed  by  the  Frst  Amendment  unless  ex¬ 


pressly  authorized  by  statute  or  by  the 
subject  of  the  record  or  unless  pertinent 
to  and  within  the  scope  of  an  authorized 
law  enforcement  activity. 

(h)  Make  reasonable  efforts  to  serve 
notice  on  an  individual  when  any  record 
on  him  is  made  available  to  any  person 
under  compulsory  legal  process  when 
such  process  becomes  a  matter  of  public 
record. 

(i)  At  least  30  days  prior  to  establish¬ 
ing  a  new  use  of  information,  publish  in 
the  Federal  Register  a  notice  of  any 
new  use  or  intended  use  of  the  informa¬ 
tion  in  the  system,  and  provide  an  op¬ 
portunity  for  interested  persons  to  sub¬ 
mit  written  data,  views,  or  arguments  to 
the  DIA. 

(j)  Requests  for  disclosure  of  the  in¬ 
dividual’s  SSN  must  inform  the  individ¬ 
ual  (1)  whether  that  disclosure  of  the 
SSN  is  mandatory  or  voluntary;  (2)  by 
what  statutory  or  other  authority  such 
number  is  solicited;  and  (3)  what  uses 
will  be  made  of  It. 

(k)  If  disclosure  of  the  SSN  is  not 
required  by  Federal  Statute  or  is  not  for 
a  system  of  records  in  existence  and 
operating  prior  to  1  January  1975,  the 
DIA  is  not  precluded  from  requesting  it. 
However,  the  separate  Privacy  Act  State¬ 
ment  for  the  SSN  alone  or  a  merged 
Privacy  Act  Statement,  covering  not  only 
the  SSN  but  also  other  items  of  per¬ 
sonal  information  must  make  clear  that 
the  disclosure  of  the  SSN  is  voluntary. 
If,  in  such  instances,  the  individual  re¬ 
fuses  to  disclose  the  SSN,  DIA  elements 
must  be  prepared  to  identify  him  by  al¬ 
ternate  means. 

§  292a.  11  Privacy  Act  exemptions. 

(a)  Officers  and  employees  of  the  DIA 
or  DoD  who  have  a  need  for  the  record 
in  the  routine  performance  of  their  duties 
are  exempt  from  disclosure  account¬ 
ability. 

(b)  Access  to  Investigative  material 
held  by  the  DIA  which  is  compiled  solely 
for  the  purpose  of  determining  suitability 
for  employment  and  for  access  to  classi¬ 
fied  information  will  be  denied  only  when 
it  would  reveal  the  identity  of  a  source 
who  furnished  information  to  the  Gov¬ 
ernment  under  an  express  promise  of 
confidence  or,  prior  to  27  September  1975, 
under  an  implied  promise  of  confidence. 
Generally  all  investigative  reports  will  be 
examined  to  determine  if  reasonably  seg¬ 
regate  portions  may  be  released  without 
unwarranted  invasion  of  third  party  pri¬ 
vacy,  or  when  the  meaning  of  these  por¬ 
tions  is  not  distorted  and  it  reasonably 
can  be  assured  that  a  skillful  and  knowl¬ 
edgeable  person  could  not  reconstruct  the 
exempt  information. 

(c)  The  categories  of  sources  of  in¬ 
formation  of  records  in  the  system  are 
exempt  from  disclosure  if  the  informa¬ 
tion  is  received  from  anyone,  including 
an  individual,  a  foreign  national,  an  in¬ 
ternational  organization,  a  state  or  local 
government,  or  corporation  or  any  other 
organization,  with  the  understanding,  ex¬ 
pressed  or  implied,  that  the  information 
will  be  retained  on  a  privileged  or  con¬ 
fidential  basis  under  criteria  contained 
in  Executive  Order  11652  and  DoD  5200.- 
1-R. 
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(d)  Notices  in  the  Federal  Register 
for  exempted  records  systems  must  pro¬ 
vide  basic  information  in  accordance 
with  §  292a. 20;  however,  they  may  be  ex¬ 
empted  from  the  Notification,  Access, 
Contest  and  Source  requirements.  All 
systems  exempted  should  specify  the  rea¬ 
sons  for  claiming  the  exemption.  Failure 
to  publish  an  exempted  notice  when  re¬ 
quired  by  the  Act  constitutes  a  criminal 
violation. 

(e)  A  system  of  records  specifically  au¬ 
thorized  under  criteria  established  by 
Executive  Order  to  be  kept  secret  in 
the  interest  of  national  defense  or  foreign 
policy,  and  which  are  in  fact  properly 
classified  pursuant  to  such  Executive 
Order,  are  exempt. 

(f)  The  Inspector  General  files  on 
complaints  and  investigations  are  par¬ 
tially  exempt  from  disclosure  under  5 
U.S.C.  552a(k)  (1)  and  (2).  The  exemp¬ 
tion  of  the  individual’s  right  of  access  to 
the  complete  record  is  based  on  confi¬ 
dentiality  and  privacy  of  individuals  re¬ 
lated  to  the  investigation  or  complaint. 
However,  the  individual  may  have  access 
only  to  that  information  provided  by 
himself. 

(g)  The  regulation  does  not  entitle  an 
individual  to  have  access  to  any  infor¬ 
mation  compiled  in  reasonable  anticipa¬ 
tion  of  a  civil  action  or  proceeding. 

(h)  Copies  of  investigatory  records 
compiled  by  an  investigative  organiza¬ 
tion,  but  in  the  temporary  custody  of  an 
element  requesting  the  record  for  pur¬ 
poses  of  adjudication  or  other  personal 
action,  are  the  records  of  the  originating 
investigative  organization.  Individuals 
seeking  access  to  such  records  will  be 
directed  to  the  originating  investigative 
organization  and  should  be  instructed  to 
direct  all  requests  submitted  under  the 
Privacy  Act  of  1974  to  that  organization. 
Records  concerning  the  adjudication,  or 
other  personnel  actions  based  on  the  in¬ 
vestigative  records,  originated  by  the 
organization  using  the  investigation,  are 
the  records  of  the  using  organization 
which  will  respond  to  all  other  requests 
under  the  Privacy  Act  of  1974  concerning 
them. 

(i)  All  systems  of  records  maintained 
by  the  DIA  will  be  exempt  from  the  re¬ 
quirements  of  5  U.S.C.  552a (d)  pursuant 
to  5  U.S.C.  552a (k)  (1)  to  the  extent  that 
the  system  contains  any  information 
properly  classified  under  Executive  Order 
“Classification  and  Declassification  of 
National  Security  Information  Material,” 
8  March  1972  (37  FR  10053, 19  May  1972) , 
and  which  is  required  by  the  Executive 
Order  to  be  kept  secret  in  the  interest 
of  national  defense  or  foreign  policy.  This 
exemption,  which  may  be  applicable  to 
parts  of  all  systems  of  records,  is  neces¬ 
sary  because  certain  record  systems  not 
otherwise  specifically  designated  for  ex¬ 
emptions  as  published  in  the  Federal 
Register  may  contain  isolated  items  of 
information  which  have  been  properly 
classified. 

§  292a.  12  Appeal  for  refusal  to  amend 
or  release  a  record. 

(a)  Procedures  to  amend  a  record  are 
contained  in  §  292a.l0.  If  the  Agency 


refuses  to  amend  the  record,  the  in¬ 
dividual  may  file  suit  against  the  DIA 
in  any  district  court.  The  court  may  order 
the  Agency  to  amend  the  individual’s 
record  in  accordance  with  his  request 
or  as  directed  by  the  court. 

(b)  The  District  courts  have  jurisdic¬ 
tion  in  suits  filed  when  a  record  is  with¬ 
held  and  the  individual  files  civil  suit.  In 
such  cases  the  court  will  determine  the 
matter  de  novo  and  may  examine  the 
contents  of  DIA  records  in  camera. 

(c)  A  requestor  may  appeal  an  initial 
decision  to  withhold  a  record  or  amend 
a  record.  Appeals  should  be  addressed 
to: 

Director,  Defense  Intelligence  Agency,  ATTN: 

SC  (PA  1974),  Washington,  D.C.  20301. 

(d)  Final  determination  on  appeal, 
concerning  the  release  of  the  record,  will 
normally  be  made  within  30  days  of  ths 
receipt  of  the  appeal. 

(e)  When  an  appeal  is  denied,  the  re¬ 
quester  will  be  apprised  of  the  following : 

(1)  Applicable  exemptions  and  the 
significant  and  legitimate  governmental 
purpose  served  by  the  denial. 

(2)  Name  and  title  of  position  of  the 
official  responsible  for  the  denial  and  of 
the  provision  for  judicial  review  of  the 
denial. 

§  292a. 13  Responsibilities. 

When  a  request  for  release  of  a  rec¬ 
ord  or  amendment  of  a  record  is  re¬ 
ceived  : 

(a)  Chief  of  Staff/Deputy  for  Man¬ 
agement  and  Plans  (CS/DP) : 

(1)  Exercises  overall  stafT  supervision 
of  the  Privacy  Act  of  1974  activities 
within  the  Agency. 

(2)  Acts  as  the  responsible  official  for 
all  final  denials  to  release  individual 
records  and  'or  amendments  to  individual 
records. 

(b)  The  Secretariat  (SC) : 

(1)  Receives  all  requests  and  assigns 
tasking  except  for  the  annual  updating 
of  records  program  conducted  by  the 
Deputy  Director  for  Personnel.  Career 
Development  and  Training  (PM) . 

(2)  Forwards  payments  received  to 
the  Reference  Library  Branch  (DS-4A) 
for  processing. 

(3)  Maintains  appropriate  suspenses 
and  authorizes  all  extensions  of  response 
time. 

(4)  Acts  as  the  responsible  official  for 
all  initial  denials  of  access  or  amendment 
to  the  individual’s  record  after  com¬ 
plete  coordination  with  all  offices  con¬ 
cerned. 

(c)  General  Counsel  (GC) ; 

(1)  Insures  uniformity  in  the  Privacy 
Act  of  1974  legal  positions  within  the 
DIA  and  DoD. 

(2)  Secures  coordination  with  the 
DoD  General  Counsel  on  denial  for  re¬ 
lease  of  individual  records  or  for  amend¬ 
ments  to  individual  records. 

(3)  Acts  as  the  focal  point  in  all  ju¬ 
dicial  actions. 

(4)  Reviews  all  initial  and  final 
denials  for  release  of  records  or  amend¬ 
ments  to  records. 

(d)  DS-4A,  Central  Reference  Divi¬ 
sion,  Director  for  Support: 


(1)  Acts  as  the  responsible  operating 
office  for  all  Agency  actions  related  to 
requests  under  the  Privacy  Act  of  1974. 

(2)  Responds  on: 

(i)  Obtaining  supplemental  informa¬ 
tion  from  the  requester. 

(ii)  Informing  the  requester  of  any 
required  fees  and  processing  such  fees 
for  delivery  to  the  Comptroller. 

(iii)  The  transfer  to  another  compo¬ 
nent  or  agency  of  the  initial  request  after 
collaboration  with  other  directorates. 

(3)  Fulfills  the  annual  reporting  re¬ 
quirements  in  conjunction  with  the  DIA 
Privacy  Act  Officer  (Records  Manage¬ 
ment  Officer)  and  maintains  appropri¬ 
ate  records. 

(4)  Drafts  for  SC: 

(i)  Notification  of  an  extension  of 
response  time. 

(ii)  A  documented  response  in  all  cases 
of  denial  of  release  and/or  amendment 
of  records. 

(iii)  Response  for  release  of  individual 
records. 

(e)  The  Deputy  Director  for  Informa¬ 
tion  Systems  (SO) : 

(1)  Formulates  policies  to  insure  that 
ADP  systems  contain  appropriate  safe¬ 
guards  to  protect  personal  privacy  in 
accordance  with  current  directives. 

(2)  Maintains  an  ADP  file  on  all  Fed¬ 
eral  Register  notices  for  all  systems  of 
records  reported  by  the  DIA  to  the  DoD 
Privacy  Board. 

(3)  Provides  an  annual  automated 
printout  of  updated  Federal  Register 
notices. 

(f)  PM: 

(1)  Monitors  all  personnel  records  to 
insure  compliance  with  the  Act. 

(2)  Plans,  develops,  present,  and  mon¬ 
itors  the  DIA  training  program  to  insure 
adequate  training  of  personnel  having 
access  to  personal  information  in  the 
course  of  their  official  duties. 

(3)  Establishes  a  general  orientation 
program  for  all  DIA  personnel  not  cov¬ 
ered  by  (2)  above. 

(g)  All  DIA  elements  will: 

(1)  When  identified  by  DS-4A  as  an 
Office  of  Primary  Interest  (OPI) : 

(1)  Review  records  for  possible  release 
within  the  time  constraints  assigned. 

(ii)  Prepare  a  documented  response  to 
DS-4A  in  all  cases  of  non-release  and/or 
denial  of  amendment  of -a  record. 

(iii)  Provide  to  DS-4A  all  reasonable 
segregable  portions  of  records  for  re¬ 
lease  to  the  individual  and  state  gen¬ 
erally  the  nature  of  or  fact  that  other 
information  was  not  released  and  the 
reasons  for  denial. 

(iv)  Inform  DS-4A  of  any  documents 
contained  in  OPI’s  file  that  belong  to 
other  elements  of  DIA  and/or  other  gov¬ 
ernmental  agencies  in  order  that  DS-4A 
can  take  proper  action  to  obtain  their 
possible  release  or  notify  the  individual 
of  location  of  additional  information. 

(v)  Provide  to  DS-4A  information  as 
required  by  paragraph  §  292a. 18. 

(2)  Require  DIA  personnel  including 
newly-assigned  personnel  to  read  this 
regulation  to  insure  familiarity  with  the 
requirements  of  the  Privacy  Act  of  1974 
as  implemented.  All  personnel  are  to 
comply  with  the  Rules  of  Conduct. 
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§  292a. 14  Tlic  DIA  Privacy  Act  Officer. 

A  DIA  Privacy  Act  Officer  position  is 
established  as  an  additional  duty  for  the 
purpose  of  insuring  the  preservation  of 
individual’s  privacy  within  the  DIA.  The 
officer  will  develop  privacy  policies  and 
programs  in  accordance  with  guidance 
and  directives  issued  by  the  Defense  Pri¬ 
vacy  Board.  The  DIA  Privacy  Act  Officer 
will: 

<a)  Be  the  Records  Management 

Officer. 

(b)  In  conjunction  with  the  repre¬ 
sentatives  of  all  major  staff  elements, 
identify  all  systems  of  records  affected 
by  the  Act. 

(c)  Obtain  all  data  required  by  the 
Act  concerning  each  records  system  so 
identified. 

(d)  Review  policies,  practices,  and 
procedures  relating  to  each  identified 
system  of  records  to  insure  they  conform 
with  the  Act. 

(e)  Review  for  conformity  with  the 
Act,  all  procedures,  including  forms, 
which  require  the  individual  to  furnish 
information  and  assist  the  appropriate 
staff  element  to  formulate  corrections  or 
supplementary  provisions,  as  necessary. 

(f)  Supervise  and  coordinate  the 
preparation  for  publication  in  the  Fed¬ 
eral  Register  of  all  required  information 
on  systems  of  records  affected  by  the  Act. 

(g)  In  conjunction  with  PM,  insure 
development  within  the  DIA  of  an  appro¬ 
priate  training  program  for  all  personnel 
whose  duties  involve  responsibility  for 
systems  of  records  affected  by  the  Act. 

(h)  In  conjunction  with  DS-4A,  refer 
to  the  DIA  GC  for  resolution  any  requests 
for  information  from  an  individual  which 
do  not  appear  to  be  clearly  authorized  by 
law  or  Executive  Order. 

(i)  Maintain  contact  with  the  Defense 
Privacy  Board  and  submit  annually  the 
required  DIA  Federal  Register  notices  to 
the  Board. 

(j)  Review  annually  and  continuously 
monitor  DIA  regulations  implementing 
the  Privacy  Act. 

(k)  Act  as  the  DIA  primary  point  of 
contact  with  DoD  on  all  Privacy  Act 
problems  except  legal  requirements 
which  will  be  handled  by  the  DIA  GC. 

§  292a. 15  Safeguarding  personal  infor¬ 
mation  in  records  systems. 

(a)  Minimum  standards  for  physical 
safeguarding  of  personal  information 
from  unauthorized  or  unintentional  ac¬ 
cess,  disclosure,  modification,  or  destruc¬ 
tion  requires  that  personal  information 
be  stored  in  a  locked  container  or  room. 
This  minimum  standard  is  prescribed  for 
non-duty  hours  as  well  as  for  duty  time 
when  there  is  no  requirement  for  use  of 
the  files. 

(b)  Personnel  handling  personal  infor¬ 
mation  during  routine  use  will  insure 
that  the  information  is  properly  con¬ 
trolled  to  prevent  unintentional  or  un¬ 
authorized  disclosure.  Such  information 
will  be  used,  held,  or  stored  only  where 
facilities  or  conditions  are  adequate  to 
prevent  unauthorized  or  unintentional 
disclosure. 

(c)  All  DIA  supervisors,  maintaining 
any  records  which  contain  personal  in¬ 


formation,  are  charged  with  the  respon¬ 
sibility  to  insure  proper  safeguarding  and 
accounting  for  all  such  records. 

(d)  Access  to  personal  information  will 
be  restricted  to  those  persons  whose  offi¬ 
cial  duties  require  access  during  routine 
use  and  the  individual  concerned. 

§  292a. 16  Disposition  and  destruction. 

(a)  Disposition  of  records  containing 
personal  information  wall  be  accom¬ 
plished  in  accordance  with  approved  rec¬ 
ord  disposition  standards  as  established 
in  DIAM  13-1,  “Records  Maintenance 
and  Disposition.” 

(b)  To  prevent  unauthorized  disclo¬ 
sure,  personal  information  will  be  de¬ 
stroyed  in  such  a  manner  that  will  pre¬ 
vent  the  contents  from  being  disclosed. 
Examples  are: 

(1)  Tearing,  shredding,  pulping,  mac¬ 
erating,  or  burning  depending  on  volume 
or  the  availability  of  equipment. 

(2)  Through  a  waste  paper  contractor, 
provided  the  contract  prohibits  resale  of 
the  records  as  documents  and  a  Federal 
official  witnesses  the  destruction. 

(3)  By  burial  provided  the  records  are 
chemically  treated  to  facilitate  decom¬ 
position. 

(4)  By  degaussing,  in  the  case  of  mag¬ 
netic  tapes  and  discs. 

§  292a. 1 7  System  of  records  content. 

(a)  Each  staff  element  will  maintain  in 
its  records  system  only  such  information 
as  is  relevant  and  necessary  to  accom¬ 
plish  a  purpose  or  mission  required  by 
statute  or  Executive  Order  of  the  Presi¬ 
dent. 

(b)  Each  staff  element  will  identify  the 
specific  provision  of  law,  or  Executive 
Order,  which  provides  authority  for  the 
maintenance  of  information  in  each  sys¬ 
tem  of  records. 

(c)  Statutory  or  regulatory  authority 
to  establish  and  maintain  a  system  of 
records  does  not  convey  unlimited  au¬ 
thority  to  collect  and  maintain  all  in¬ 
formation  which  may  be  useful  or  con¬ 
venient  to  have.  Staff  elements  main¬ 
taining  records  will  evaluate  each  cate¬ 
gory  of  information  in  a  system  for  both 
necessity  and  relevance.  In  performing 
this  evaluation  the  following  will  be  con¬ 
sidered: 

(1)  Relationship  of  each  item  of  in¬ 
formation  to  the  statutory  or  regulatory 
purpose  for  which  the  system  is  main¬ 
tained. 

(2)  Specific  adverse  consequence  of  not 
collecting  each  category  of  information. 

(3)  Possibility  of  obtaining  the  infor¬ 
mation  requested  through  use  of  infor¬ 
mation  not  individually  identifiable  or 
through  sampling  techniques. 

(4)  Length  of  time  that  the  informa¬ 
tion  is  needed  and  where  appropriate, 
techniques  for  purging  parts  of  the  rec¬ 
ords. 

(5)  Financial  cost  of  information 
maintenance  compared  to  risk  or  ad¬ 
verse  consequence  of  not  maintaining  it. 

(6)  Necessity  and  relevance  of  this  in¬ 
formation  to  all  individuals  included  in 
the  system. 

(d)  Collection  will  be  discontinued  for 
each  category  or  item  of  information 


which  after  the  above  evaluation  does 
not  appear  to  be  fully  justifiable.  More¬ 
over,  such  information  will  be  withdrawn 
and  destroyed  provided  it  can  be  eco¬ 
nomically  segregated  from  the  necessary 
and  relevant  information. 

(e)  The  evaluation  prescribed  above 
will  be  performed  by  each  staff  element 
maintaining  a  system  of  records  of  sub¬ 
ject  to  the  test. 

(1)  During  the  design  phase  of  a  new 
system  of  records  or  a  change  in  an 
existing  system  of  records. 

(2)  Annually,  prior  to  the  republica¬ 
tion  of  all  system  notices  in  the  Federal 
Register. 

§  292a.  18  Annual  report  requirements 
RCSDD(A)  1379. 

(a)  Each  DIA  element  maintaining 
records  which  are  subject  to  the  Privacy 
Act  will  submit  an  annual  report  to  DS- 
4A.  Two  copies  of  the  report  will  be  fur¬ 
nished  by  1  March  of  each  year. 

(b)  The  annual  report  will  contain  the 
following : 

(1)  The  number  of  records  in  any 
system  of  records  exempted  from  the 
provisions  of  the  Act  and  the  reasons 
why  the  systems  were  exempted. 

(2)  The  number  of  systems  of  records 
changed,  the  number  of  new  systems, 
and  a  brief  summary  of  the  reasons  for 
major  changes. 

(3)  A  brief  summary  of  major  accom¬ 
plishments,  including  training  provided 
and  any  other  significant  efforts  under¬ 
taken  to  comply  with  the  Act. 

(4)  Problems  in  complying  with  the 
Act  and  recommendations  for  solutions 
to  problems  or  other  changes. 

(5)  Report  of  available  data  on  costs 
of  administering  the  Act.  Reports  of 
manhours  (by  grade)  expended  and 
other  costs  are  to  be  reported. 

(c)  DS-4A  will  consolidate  the  infor¬ 
mation  provided  by  all  staff  elements 
and  prepare  a  brief  general  description 
of  operational  experiences,  including 
estimates  of  the  number  of  individuals 
exercising  their  rights  under  the  Act 
(compared  to  the  number  of  records  in 
the  system),  requesting  information  on 
the  existence  of  records  pertaining  to 
them,  refusing  to  provide  information, 
requesting  access  to  their  records  and 
appealing  initial  refusals  to  amend  rec¬ 
ords,  and  the  seeking  of  redress  through 
the  courts. 

§  292a. 19  Agency  fees  for  duplication 
under  the  Privacy  Act  of  1974. 


General  Fees 

Minimum  fee,  per  request  plus _ $2  .00 

Forms,  per  copy _  .05 

Publications,  per  printed  page -  .01 

Microfiche,  per  flche _  .06 

Reports,  per  printed  page _  .05 


(Examples:  Cost  of  20  forms,  $3.00;  cost  of  a 
printed  publication  with  100  pages,  $3.00; 
cost  of  a  microfiche  publication  consisting  of 
10  fiche,  $2.60.) 

Office  Copy  Reproduction  (when  shelf 
stock  is  not  available). 

Minimum  charge  up  to  6  reproduced 


pages  _ $2  .00 

Minimum  charge,  1st  flche -  6. 00 

Each  additional  page -  .06 

Each  additional  fiche -  .10 
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Other  Issuances 

Minimum  charge  up  to  8  pages - $2  .00 

Each  additional  page -  .05 


g  292a.20  Federal  Register  annual  no* 
tice. 

The  annual  notice  published  In  the 
Federal  Register  must  Include  Informa¬ 
tion  on  the  existence  and  character  of 
the  system  of  records  and  will  Include  the 
following: 

(a)  Name  and  location  of  the  system. 

(b)  The  categories  of  records  main¬ 
tained  in  the  system. 

(c)  Each  routine  use  of  the  records 
contained  in  the  system,  including  cate¬ 
gories  of  users  and  the  purpose  of  such 
use. 

(d)  The  policies  and  practices  of  the 
Agency  regarding  storage,  retrlevability. 
access  controls,  retention,  and  disposal 
of  the  records. 

(e)  The  title  and  business  address  of 
the  Agency  official  who  is  responsible  for 
the  system  of  records. 

(f)  The  Agency  procedures  whereby 
an  individual  can  be  notified  at  his  re¬ 
quest  if  the  system  of  records  contains 
a  record  pertaining  to  him. 

(g)  The  Agency  procedures  whereby 
an  individual  can  be  notified  at  his  re¬ 
quest  how  he  can  gain  access  to  any 
record  pertaining  to  him  contained  in 
the  system  of  records  and  how  he  can 
contest  its  content. 

(h)  The  categories  of  sources  of 
records  in  the  system  (may  be  exempt 
by  the  DR) . 

§  292a. 21  Rules  of  conduct. 

(a)  Purpose.  To  prescribe  the  rules  of 
conduct  relating  to  the  possible  conflict 
between  official  use  and  dissemination  of 
information  from  all  files  and  systems  of 
records  reported  under  the  Privacy  Act 
of  1974,  and  the  unofficial  disclosure  of 
such  information  by  personnel  having 
access  to  such  files  on  a  routine-use  basis. 
Close  adherence  to  these  rules  will  insure 
compliance  with  the  high  ethical  stand¬ 
ards  demanded  of  all  DIA  employees. 
Violations  of  these  rules  may  cause  the 
individual  to  be  foimd  guilty  under  the 
civil  and/or  criminal  penalties  set  forth 
in  the  Privacy  Act  of  1974.  Appropriate 
disciplinary  action  may  also  be  imposed 
or  recommended  by  the  Director,  DIA 
for  violation  of  these  rules  of  conduct.  All 
military  and  civilian  employees  will 
familiarize  themselves  thoroughly  with 
the  rules  of  conduct. 

(b)  Scope.  The  rules  of  conduct  apply 
to  all  military  and  civilian  employees  of 
the  DIA  and  cover  all  files,  records,  or 
systems  of  records  containing  identifiable 
personal  information  as  covered  by  the 
provisions  of  the  Privacy  Act  of  1974. 

(c)  Ethical  Standards  of  Conduct. 
DIA  personnel  will  refrain  from  any  dis¬ 
closure  of  personal  information,  except 
those  official  disclosures  covered  as 
routine  use  as  published  in  the  Federal 
Register  notices  on  systems  of  records. 
All  other  disclosures  must  be  authorized 
by  the  individual  who  is  the  subject  of 
the  record.  Unauthorized  disclosures 
place  the  DIA  employee  in  a  position  of 
conflict  and  Jeopardize  the  privacy  of  the 


individual  who  may  seek  legal  relief  for 
such  actions. 

(d)  Unauthorized  Release  of  Personal 
Information.  It  is  the  individual  respon¬ 
sibility  of  all  personnel,  both  military  and 
civilian,  of  the  DIA  to  refrain  from  re¬ 
leasing  to  any  Individual  or  business 
concern  or  its  representatives  any  per¬ 
sonal  information  from  files  maintained 
by  DIA. 

(e)  Considerations  of  Disclosure. 

(1)  DIA  personnel  will  not  knowingly 
provide  personal  Information  to  military 
or  civilian  personnel,  or  former  military 
or  civilian  personnel,  of  the  Government 
if  such  action  will  result  in  a  violation  of 
the  Privacy  Act. 

(2)  All  DIA  personnel  who  are  mem¬ 
bers  or  officers  of  non-governmental 
associations  or  organizations  must  avoid 
the  use  of  disclosure  of  personal  infor¬ 
mation  gained  through  official  duties  or 
position  for  use  of  the  association  or 
organization  for  whatever  stated  purpose. 

(3)  DIA  personnel  are  prohibited  from 
personal  use  of  private  information  for 
commercial  solicitation  and  sale:  Infor¬ 
mation  obtained  through  official  duties 
will  not  be  sold,  rented,  or  passed  to  com¬ 
mercial  enterprises. 

(4)  DIA  personnel  having  access  to 
personal  information  will  avoid  any  ac¬ 
tion  which  might  result  in  or  create  an 
appearance  of  giving  preferential  treat¬ 
ment  to  any  persons  which  could  be 
based  on  knowledge  obtained  from  official 
DIA  files. 

(5)  All  DIA  employees  should  avoid 
any  action  or  activity  relating  to  the 
privacy  of  an  individual  which  could 
adversely  affect  the  confidence  of  the 
public  in  the  integrity  of  the  DIA  or  the 
Government  in  the  management  of  per¬ 
sonal  information. 

(6)  All  DIA  employees  should  avoid 
the  solicitation,  acceptance,  or  agree¬ 
ment  to  accept  anything  of  value  in 
return  for  providing  personal  informa¬ 
tion. 

(f)  Information  to  Personnel.  Infor¬ 
mation  to  clarify  these  rules  of  conduct 
and  case  determinations  as  to  legality  of 
proposed  actions  will  be  referred  to  the 
DIA  GC  for  resolution. 

(g)  Reporting  Suspected  Violators. 
DIA  personnel  who  have  information 
which  causes  them  to  believe  that  there 
has  been  a  violation  of  the  Privacy  Act 
of  1974  or  of  this  regulation  will  promptly 
report  such  incidents  to  their  immediate 
supervisor.  If  the  supervisor  believes 
there  has  been  a  violation,  it  will  be  re¬ 
ported  to  the  DR  for  appropriate  action. 
Any  question  or  doubt  on  the  part  of  the 
Immediate  supervisor  will  be  resolved  in 
favor  of  reporting  the  matter.  A  brief  of 
the  circumstances  of  the  violation  will  be 
submitted  in  writing  with  a  comment 
that  the  alleged  violator  has  been  advised 
of  the  violation.  Supervisors  should 
recommend  action  and  route  the  docu¬ 
ments  through  DIA  GC  for  legal  deter¬ 
mination  in  order  to  provide  the  DR  with 
staff  recommendations. 

§  292a. 22  General  information. 

(a)  The  Director,  Defense  Intelligence 
Agency  proposes  to  designate  the  follow¬ 


ing  systems  of  records  listed  in  32  CFR, 
Part  292a.24  which  are  maintained  by  the 
DIA  for  exemptions  under  the  specified 
provisions  of  the  Privacy  Act  of  1974 
(Public  Law  93-579). 

(b)  Any  person  interested  in  the  ex¬ 
emptions  proposed  herein  may  partici¬ 
pate  in  this  proposed  rulemaking  by  sub¬ 
mitting,  either  in  person  or  through  the 
mail,  written  data,  views  or  arguments 
on  the  proposed  exemptions  to  the  De¬ 
fense  Intelligence  Agency,  ATTN :  SC  (PA 
1974),  The  Pentagon,  Washington,  D.C. 
20301,  on  or  before  September  27,  1975. 

(c)  All  systems  of  records  maintained 
by  the  DIA  will  be  exempt  from  the  re¬ 
quirements  of  5  U.S.C.  552a(d)  pursuant 
to  5  U.S.C.  552a(k>  (1)  to  the  extent  that 
the  system  contains  any  information 
properly  classified  under  Executive  Or¬ 
der  11652,  “Classification  and  Declassifi¬ 
cation  of  National  Security  Information 
and  Material,”  8  March  1972  (37  FR 
10053,  19  May  1972),  and  which  is  re¬ 
quired  by  the  Executive  Order  to  be  kept 
secret  in  the  interest  of  national  defense 
or  foreign  policy.  This  exemption,  which 
may  be  applicable  to  parts  of  all  systems 
of  records,  is  necessary  because  certain 
record  systems  not  otherwise  specifically 
designated  for  exemptions  herein  may 
contain  isolated  items  of  information 
which  have  been  properly  classified. 

(d)  Although  the  Defense  Intelligence 
Agency  is  not  a  law  enforcement  agency, 
there  are  incidents  when  law  enforce¬ 
ment  information  is  developed  concern¬ 
ing  an  individual.  All  such  information, 
developed  in  the  course  of  investigative 
procedures  within  DIA,  will  be  exempt 
from  the  requirements  of  5  U.S.C.  552a 
(d)  pursuant  to  5  U.S.C.  552a(j)(2). 
Granting  individuals  access  to  informa¬ 
tion  collected  and  maintained  by  this 
component  relating  to  the  enforcement 
of  criminal  laws  could  interfere  with 
orderly  investigations,  with  the  orderly 
administration  of  justice,  and  possibly 
enable  suspects  to  avoid  detection  or 
apprehension.  Disclosure  of  this  infor¬ 
mation  could  result  in  concealment,  de¬ 
struction,  or  fabrication  of  evidence  and 
jeopardize  the  safety  and  well  being  of 
informants,  witnesses  and  their  families, 
and  investigative  personnel  and  their 
families.  Disclosure  of  this  information 
could  also  reveal  and  render  ineffectual 
Investigative  techniques,  sources,  and 
methods  used  during  investigations  and 
could  result  in  the  invasion  of  the  pri¬ 
vacy  of  individuals  only  incidentally  re¬ 
lated  to  the  investigations.  The  exemp¬ 
tion  of  the  individual’s  right  of  access  to 
his  records  and  the  reasons  therefore 
necessitate  the  exemption  of  this  infor¬ 
mation  from .  the  requirements  of  the 
other  cited  provisions. 

§  292a. 23  Specific  exemptions. 

(a)  ED — Manual  L  DIA  0800. 

(1)  Sysname.  Project  Files. 

(2)  Exemption.  This  system  of  records 
is  exempt  from  the  following  provisions 
of  Title  5,  U.S.C.  Section  552a:  (c)(3), 
(d),  (e)  tl),  (e)(4)(G),  (e)(4)(H),  (e) 
(4)  (I)  and  <f). 

(3)  Authority.  5  UJ3.C.  522a(k)  (1). 

(4)  Reasons.  These  files  contain  prop¬ 
erly  classified  Information  under  Execu- 
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tive  Order  11652  and  are  required  by  the 
Executive  Order  to  be  kept  secret  in  the 
interest  of  national  defense  or  foreign 

policy. 

<b>  ID — Automated  L  DIA  0802. 

<  1  >  Sysname.  Project  files. 

<2>  Exemption.  This  system  of  records 
is  exempt  from  the  following  provisions 
of  Title  5,  U.S.C.,  Section  552a:  (c)(3), 
<d) ,  (e)(1),  (e)(4)(G),  (e)(4)(H),  (e) 
(4)  (I)  and  (f). 

(3)  Authority.  5  U.S.C.  552a(d)  (1). 

<4>  Reasons.  These  files  contain  prop¬ 
erly  classified  information  under  Execu¬ 
tive  Order  11652  and  are  required  by  the 
Executive  Order  to  be  kept  secret  in  the 
Interest  of  defense  or  foreign  policy. 

(c)  ID — Manual  L  DIA  530. 

(1)  Sysname.  Intelligence  collection 
records. 

(2)  Exemption.  This  system  of  records 
Is  exempt  from  the  following  provisions 
of  Title  5,  U.S.C.,  Code  552a:  (c)(3), 

(d),  (e)(1),  (e)(4)(G),  (e)(4)(H),  (e) 
(4)  (I)  and  (f). 

(3)  Authority.  5  U.S.C.  552a(k)(l). 

(4)  Reasons.  These  files  contain  prop¬ 
erly  classified  information  under  Execu¬ 
tive  Order  11652  and  are  required  by  the 
Executive  Order  to  be  kept  secret  in  the 
interest  of  national  defense  or  foreign 
policy. 

(d)  ID— Manual  L  DIA  0272. 

(1)  Sysname.  Complaints. 

(2)  Exemption.  This  system  of  records 
is  exempt  from  the  following  provisions 
of  Title  5,  U.S.C.,  Section  552a:  (c)  (3), 
(d),  (e)(1),  (e)(4)(G),  (e)(4)(H),  (e) 
(4)  (I)  and  (f). 

(3)  Authority.  5  U.S.C.  552a(k)  (1) 
and  (2). 

(4)  Reasons.  Granting  individuals  ac¬ 
cess  to  information  collected  and  main¬ 
tained  by  this  component  relating  to  the 
enforcement  of  criminal  laws  could  in¬ 
terfere  with  orderly  investigations,  with 
the  orderly  administration  of  justice, 
and  possibly  enable  suspects  to  avoid 
detection  or  apprehension.  Disclosure  of 
this  information  could  result  in  the  con¬ 
cealment,  destruction  or  fabrication  of 
evidence  and  jeopardize  the  safety  and 
well  being  of  informants,  witnesses  and 
their  families,  and  law  enforcement  per¬ 
sonnel  and  their  families.  Disclosure  of 
this  information  could  also  reveal  and 
render  ineffectual  investigative  tech¬ 
niques,  sources,  and  methods  used  by  this 
component  and  could  result  in  the  in¬ 
vasion  of  the  privacy  of  individuals  only 
incidently  related  to  an  investigation. 

(i)  The  exemption  of  the  individual’s 
right  of  access  to  the  complete  record  and 
the  reasons  therefore  necessitate  the  ex¬ 
emption  of  this  system  of  records  from 
the  requirements  of  the  other  cited  pro¬ 
visions.  However,  the  individual  may 
have  access  only  to  that  information 
provided  by  himself.  These  files  contain 
properly  classified  information  under 
Executive  Order  11652  and  are  required 
by  the  Executive  Order  to  keep  secret 
in  the  interest  of  national  defense. 

(e)  ID— Manual  L  DIA  0291. 

(1)  Sysname.  Investigations. 

(2)  Exemption.  This  system  of  rec¬ 
ords  is  exempt  from  the  following  pro¬ 
visions  of  Title  5,  U.S.C.,  Section  552a: 


(c)(3),  (d),  (e)(1),  (e)(4)(G),  (e)(4) 
(H),  (e)(4)  (I)  and  (f). 

(3)  Authority.  5  U.S.C.  552a(k)  (1) 
and  (2). 

(4)  Reasons.  Granting  individuals  ac¬ 
cess  to  information  collected  and  main¬ 
tained  by  this  component  relating  to  the 
enforcement  of  criminal  laws  could  in¬ 
terfere  with  orderly  investigations,  with 
the  orderly  administration  of  justice,  and 
possibly  enable  suspects  to  avoid  detec¬ 
tion  or  apprehension.  Disclosure  of  this 
information  could  result  in  the  conceal¬ 
ment,  destruction  or  fabrication  of  evi¬ 
dence  and  jeopardize  the  safety  and  well 
being  of  informants,  witnesses  and  their 
families,  and  law  enforcement  personnel 
and  their  families.  Disclosure  of  this  in¬ 
formation  could  also  reveal  and  render 
ineffectual  investigative  techniques, 
sources  and  methods  used  by  this  com¬ 
ponent  and  could  result  in  the  invasion 
of  the  privacy  of  individuals  only  inci¬ 
dentally  related  to  an  investigation. 

(i)  The  exemption  of  the  individual’s 
right  of  access  to  the  complete  record 
and  the  reasons  therefore  necessitate 
the  exemption  of  this  system  of  records 
from  the  requirements  of  the  other  cited 
provisions.  However,  the  individual  may 
have  access  only  to  that  information 
provided  by  himself.  The  files  contain 
properly  classified  information  under 
Executive  Order  11652  and  are  required 
by  the  Executive  Order  to  be  kept  secret 
in  the  interest  of  national  defense. 

Dated:  August  8,  1975. 

Eugene  F.  Tighe,  Jr., 
Lieutenant  General,  USAF 
Acting  Director. 

Maurice  W.  Roche, 

Director  Correspondence  and 
Directives  OASD  ( Comptroller ) . 

[FR  Doc.75-22203  Filed  8-25-75:8:45  am] 


Defense  Investigative  Service 
[32  CFR  Part  298a] 

PRIVACY  ACT  OF  1974 
Notice  of  Proposed  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (Pub  L.  93-579;  88  Stat.  1896,  5 
U.S.C.  552a)  which  requires  each  Fed¬ 
eral  agency  that  maintains  any  systems 
of  records  as  defined  in  the  statute  to 
promulgate  rules  pursuant  to  the  pro¬ 
visions  of  the  Act. 

Notice  is  hereby  given  that  the  Defense 
Investigative  Service  (DIS)  a  compo¬ 
nent  of  the  Department  of  Defense 
(DOD)  presently  maintains  such  sys¬ 
tems  of  records  with  respect  to  persons 
investigated  by  DIS  and  certain  other 
DOD  investigative  agencies  as  well  as 
some  personnel  records  of  DIS  employ¬ 
ees  and  applicants.  The  Defense  Investi¬ 
gative  Service  proposes  to  change  32 
CFR  Part  298  by  adding  Part  298a. 

The  significant  portions  of  this  rule 
provide  the  procedures  for  requests  for 
information,  access  to  and  disclosure  of 
records.  The  Assistant  for  Information 
(D0020)  has  been  named  the  person  pri¬ 
marily  responsible  for  handling  all  re¬ 
quests  under  the  Privacy  Act.  The  rules 


further  contain  provisions  for  account¬ 
ing  of  disclosures  made,  request  for 
amendment  of  a  record  and  appeal  from 
refusal  to  amend  a  record,  and  fees  for 
copying  and  mailing  of  records.  Exemp¬ 
tions  under  the  Act  are  claimed  for  cer¬ 
tain  systems  of  records  maintained  by 
DIS. 

Any  person  interested  in  the  rules  pro¬ 
posed  herein  may  participate  in  this  pro¬ 
posed  rulemaking  by  submitting  either 
in  person  or  through  the  mail  written 
data,  views,  or  arguments  to  the  Assist¬ 
ant  for  Information,  Defense  Investi¬ 
gative  Service,  (DIS-D0020),  Room 
2H043,  Forrestal  Building,  Washington, 
DC  20314  on  or  before  September  25, 
1975. 

Therefore,  pursuant  to  5  U.S.C.  553, 
subsections  3  and  4  of  the  Administra¬ 
tive  Procedure  Act  and  the  Privacy  Act 
of  1974,  Title  32  of  the  Code  of  Federal 
Regulations  Part  298a  is  proposed  as  set 
forth  below: 


PART 

298a— PRIVACY  ACT  OF  1974 

Sec. 

298a.  1 

Purpose  and  applicability 

298a.2 

References 

298a. 3 

Definitions 

298a  .4 

Information  and  procedures  for  re¬ 
questing  notification 

298a. 5 

Requirements  for  identification 

298a.6 

Access  by  subject  individuals 

298a,7 

Medical  records 

298a. 8 

Request  for  correction  or  amend¬ 
ment 

298a.9 

DIS  review  of  request  for  amend¬ 
ment 

298a. 10 

Appeal  of  initial  amendment  de¬ 
cision 

298a.ll 

Disclosure  to  other  than  subject 

298a.l2 

Fees 

298a. 13 

Penalties 

298a. 14 

Exemption 

198a. 15 

DIS  implementation  policies. 

Authority:  88  Stat.  1896,  6  U.S.C.  652a; 
Pub.  L.  93-579. 


§  298a.  1  Purpose  and  applicability. 

(a)  This  part  establishes  rules,  policies 
and  procedures  for  the  disclosure  of  per¬ 
sonal  records  in  the  custody  of  the  De¬ 
fense  Investigative  Service  (DIS)  to  the 
individual  subjects,  the  handling  of  re¬ 
quests  for  amendment  or  correction  of 
such  records,  appeal  and  review  of  DIS 
decisions  on  these  matters,  and  the  ap¬ 
plication  of  general  and  specific  exemp¬ 
tions,  under  the  provisions  of  the  Privacy 
Act  of  1974.  It  also  prescribes  other  poli¬ 
cies  and  procedures  to  effect  compliance 
with  the  Privacy  Act  of  1974  and  DOD 
Directive  5400.11. 

(b)  The  procedures  set  forth  in  this 
part  do  not  apply  to  DIS  personnel  seek¬ 
ing  access  to  records  pertaining  to  them¬ 
selves  which  previously  have  been  avail¬ 
able.  DIS  personnel  will  continue  to  be 
granted  ready  access  to  their  personnel, 
security,  and  other  records  by  making 
arrangements  directly  with  the  main¬ 
taining  office.  DIS  personnel  should  con¬ 
tact  the  Assistant  for  Information  for 
access  to  investigatory  records  pertain¬ 
ing  to  themselves  or  any  assistance  in 
obtaining  access  to  other  records  per¬ 
taining  to  themselves,  and  may  follow 
the  procedures  outlined  in  these  rules 
in  any  case. 
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§  298a. 2  References. 

(a)  Public  Law  93-579  (5  U.S.C.  552a) 
the  Privacy  Act  of  1974. 

(b)  DOD  Directive  5400.11.  Personal 
Privacy  and  Rights  of  Individuals  Re¬ 
garding  Their  Personal  Records,  dated  4 
August  1975. 

(c)  DIS  Regulation  28-1,  “The  DIS 
Records  Management  Program.” 

(d)  DOD  Directive  5400.7,  Availability 
to  the  Public  of  DOD  Information,  dated 
14  February  1975. 

(e)  Office  of  Management  and  Budg¬ 
et  Guidelines  for  Implementation  of  the 
Privacy  Act  of  1974,  dated  1  July  1975. 

(f)  DIS  Manual  for  Personnel  Secu¬ 
rity  Investigations. 

§  298a. 3  Definitions. 

(a)  Individual.  A  citizen  of  the  United 
States  or  an  alien  lawfully  admitted  for 
permanent  residence.  A  legal  guardian 
or  the  parent  of  a  minor  have  the  same 
rights  as  the  individual  and  may  act  on 
behalf  of  the  individual. 

(b)  Maintain  (records  on  individu¬ 
als)  .  Collect,  use,  or  disseminate. 

(c)  Record.  Any  item,  collection,  or 
grouping  of  Information  about  an  indi¬ 
vidual  that  is  maintained  by  DIS  or  ele¬ 
ment  thereof,  but  not  limited  to,  edu¬ 
cation,  financial  transactions,  medical 
history,  and  criminal  or  employment  his¬ 
tory,  and  that  contains  his  name,  or  an 
identifying  number,  symbol,  or  other 
identifying  particular  assigned  to  the  in¬ 
dividual,  such  as  a  photograph. 

(d)  System  of  records.  A  group  of  any 
records  under  the  control  of  DIS  or  ele¬ 
ment  thereof  from  which  information 
is  retrieved  by  the  name  of  an  individual, 
or  by  some  identifying  number,  symbol, 
or  other  identifying  particular  assigned 
to  the  individual. 

(e)  Routine  use.  With  respect  to  the 
disclosure  of  a  record,  the  use  of  such 
record  for  a  purpose  which  is  compati¬ 
ble  with  the  purpose  for  which  it  was 
collected.  (Routine  use  encompasses  not 
only  common  or  ordinary  uses,  but  also 
all  proper  and  necessary  uses  of  the 
record,  even  if  such  use  occurs  infre¬ 
quently.) 

(f)  Non-system  individual  informa¬ 
tion.  Information  such  as  identification 
of  individuals,  that  is  not  a  part  of  a 
system  of  records,  or  is  not  maintained 
or  controlled  by  DIS.  (See  §  298a.  15. ) 

(g)  DIS  affiliates,  j^ny  present  or  for¬ 
mer  member  of  DIS,  civilian  applicant, 
or  military  nominee  for  assignment  to 
DIS. 

(h)  Notification.  Generally  refers  to 
notifying  an  individual  whether  he  is  a 
subject  of  a  record  in  a  system  of  records 
maintained  by  DIS. 

(i)  Access.  Generally  refers  to  access 
to  a  record  by  the  individual  who  is  its 
subject. 

( j )  Disclosure.  Generally  refers  to  pro¬ 
viding  a  record,  or  information  from  a 
record,  to  an  individual,  agency  or  com¬ 
ponent  other  than  the  individual  to 
whom  the  record  pertains. 

(k)  Accounting.  Generally  refers  to 
making  a  record  of  the  disclosure  of  a 
record  concerning  an  Individual  for  any 


purpose  to  any  individual,  agency  or 
component  outside  of  DOD. 

§  298a. 4  Information  and  procedures 
for  requesting  notification. 

(a)  General.  Any  individual  may  re¬ 
quest  and  receive  notification  of  whether 
he  is  the  subject  of  a  record  in  any  sys¬ 
tem  of  records  maintained  by  DIS  using 
the  information  and  procedures  de¬ 
scribed  in  this  section. 

(1)  Section  298a.4(b)  and  (c)  give  in¬ 
formation  that  will  assist  an  individual 
in  determining  in  what  systems  of  DIS 
records  (if  any)  he  may  be  the  subject. 
This  information  is  presented  as  a  con¬ 
venience  to  the  individual  in  that  he  may 
avoid  consulting  the  lengthy  systems  no¬ 
tices  elsewhere  in  the  Federal  Register. 

(2)  Section  298a.4(d)  details  the  pro¬ 
cedure  an  individual  should  use  to  con¬ 
tact  DIS  and  request  notification.  It  will 
be  helpful  if  the  individual  states  what 
his  connection  with  DIS  has  or  may  have 
been,  and  about  what  record  system(s) 
he  is  inquiring.  Such  information  is  not 
required,  but  its  absence  may  cause  some 
delay. 

(b)  DIS  Record  Systems.  Following  is 
a  list  of  DIS  records  systems  pertaining 
to  Individuals.  These  systems  are  de¬ 
scribed  in  detail  in  DOD  input  to  the 
Federal  Register. 

Authorizing  DIS  Records  Systems 
Pertaining  to  Individuals 

Number  Title 

DIS  1-01  Privacy  and  Freedom  of  Infor¬ 
mation  Request  Records. 

DIS  2-01  Inspector  General  Complaints. 

DIS  4-01  Civilian  Employee  Personnel 

Records. 

DIS  4-02  Optional  Personnel  Manage¬ 

ment  Records  (OPMR) . 

DIS  4-03  Manpower  Personnel  Assign¬ 

ment  Document  (MPAD) . 

DIS  4-04  Civilian  Applicant  Records. 

DIS  4-05  Military  Personnel  Management 

Information  System. 

DIS  4-06  Civilian  Personnel  Management 

Information  System. 

DIS  4-07  Adverse  Actions,  Grievance  Files 

and  Administrative  Appeals. 
DIS  4-08  Equal  Employment  Opportunity 

Complaints. 

DIS  4-09  Merit  Promotion  Plan  Records. 

DIS  4-10  Inoentive  Awards. 

DIS  6-01  Investigative  Files  System. 

DIS  5-02  The  Defense  Central  Index  of 

Investigations  (DCII). 

DIS  5-03  National  Agency  Check  Case 

Control  System  (NCCS). 

DIS  5-04  Defense  Case  Control  System 

(DCCS) . 

DIS  6-01  Defense  Investigative  Service 

Personnel  Security  Files. 

DIS  6-02  Special  Compartmented  Intel¬ 

ligence  (SCI)  Access  File. 

(c)  Categories  of  individuals  in  DIS 
record  systems.  (1)  If  an  individual  has 
ever  been  investigated  by  DIS,  the  in¬ 
vestigative  case  file  should  be  a  record 
in  system  DIS  5-01,  and  an  index  to  that 
file  should  be  in  system  DIS  5-02  (above) . 

(i)  Note.  Systems  DIS  5-03  and  DIS 
5-04  are  automated  case  management 
systems  used  by  DIS  while  an  investiga¬ 
tion  is  open  to  keep  track  of  leads,  dates, 
etc.  There  is  no  substantive  investigative 
Information  in  these  systems.  Entries  are 
removed  when  a  case  is  closed. 


(ii)  Since  October  1972,  DIS  has  con¬ 
ducted  almost  all  personnel  security  in¬ 
vestigations  for  DOD;  those  case  records 
are  in  system  DIS  5-01. 

(2)  If  an  individual  has  ever  made  a 
formal  request  to  DIS  under  the  Freedom 
of  Information  Act  or  the  Privacy  Act  of 
1974,  a  record  pertaining  to  that  request 
under  the  name  of  the  requester,  or  sub¬ 
ject  matter,  will  be  in  system  DIS  1-01. 

(3)  If  an  individual  is  or  has  ever  been 
a  member  of  DIS,  i.e.,  a  civilian  employee 
or  appointee,  or  a  military  assignee,  then 
he  may  be  a  subject  of  any  of  the  18 
records  systems  depending  on  his  activi¬ 
ties,  with  the  following  exceptions: 

(i)  Civilian  personnel  will  not  be  sub¬ 
jects  of  system  DIS  4-05. 

(ii)  Military  personnel  will  not  be  sub¬ 
jects  of  systems  DIS  4-06,  07,  08  or  09. 

(4)  Individuals  who  have  been  appli¬ 
cants  for  employment  with  DIS,  or 
nominees  for  assignment  to  DIS,  but  who 
have  not  completed  their  DIS  affiliation, 
may  be  subjects  in  systems  DIS  4-02,  DIS 
4-04,  DIS  5-01,  DIS  5-02,  or  DIS  6-01. 

(5)  Any  individual  who  is  a  subject, 
victim  or  cross-referenced  personality  in 
an  investigation  by  an  investigative  ele¬ 
ment  of  any  DOD  component,  may  be 
referenced  in  the  Defense  Central  Index 
of  Investigations,  system  DIS  5-02,  in  an 
index  to  the  location,  file  number,  and 
custodian  of  the  case  record. 

(6)  Individuals  who  have  ever  pre¬ 
sented  a  complaint  to  or  have  been  con¬ 
nected  with  a  DIS  Inspector  General  in¬ 
quiry  may  be  subjects  of  records  in 
system  DIS  2-01. 

(d)  Procedures.  The  following  pro¬ 
cedures  should  be  followed  to  determine 
if  an  individual  is  a  subject  of  records 
maintained  by  DIS,  and  to  request  noti¬ 
fication  and  access. 

(1)  Individuals  should  submit  in¬ 
quiries  in  person  or  by  mail  to  “The 
Assistant  for  Information,  Defense  In¬ 
vestigative  Service  (D0020) ,  Room  2H043, 
Forrestal  Building,  1000  Independence 
Avenue  SW,  Washington,  DC  20314.” 
Inquiries  by  personal  appearance  or  tele¬ 
phone,  (202)  693-1740,  should  be  made 
Monday  through  Wednesday  from  9  a.m. 
to  3  p.m.  The  information  requested  in 
§  298a. 5,  must  be  provided  if  records  are 
to  be  accurately  identified. 

(1)  Requests  may  specify  DIS  systems 
to  be  checked,  but  it  is  not  required.  In 
a  case  where  the  system  of  records  is  not 
specified  in  the  request,  only  systems  that 
would  reasonably  contain  records  of  the 
individual  will  be  checked,  as  described 
in  §  298a.4b. 

(ii)  Requests  for  notification  will  not 
be  regarded  as  requests  for  access  unless 
the  request  so  specifies. 

(2)  Only  the  Director,  the  Assistant 
for  Information,  the  Assistant  for  Legal 
Affairs,  or  the  Director  for  Operational 
Policy  may  authorize  exemptions  to  no¬ 
tification  of  individuals,  in  accordance 
with  §  298a.l4,  of  this  part. 

§  298a. 5  Requirements  for  identifica¬ 
tion. 

(a)  General.  Only  upon  proper  iden¬ 
tification,  made  in  accordance  with  the 
provisions  of  this  section,  will  any  in¬ 
dividual  be  granted  notification  concem- 


FEDERAL  REGISTER,  VOL.  40,  NO.  166— TUESDAY,  AUGUST  26,  1975 


PROPOSED  RULES 


37318 


ing  and  access  to  all  releasable  records 
pertaining  to  him  which  are  maintained 
in  a  DIS  system. 

i  b>  Identification.  Identification  of  in¬ 
dividuals  is  required  both  for  accurate 
record  identification  and  to  verify  iden¬ 
tity  in  order  to  avoid  disclosing  records 
to  unauthorized  persons.  Individuals  who 
request  notification  of.  access  to,  or 
amendment  of  records  pertaining  to 
themselves,  must  provide  their  full  name 
(and  additional  names  such  as  aliases, 
maiden  names,  alternate  spellings,  etc., 
if  a  check  of  these  variants  is  desired) , 
date  and  place  of  birth,  and  social  secu¬ 
rity  account  number  <  SSAN) . 

(1)  Where  reply  by  mail  is  requested, 
a  mailing  address  is  required,  and  a  tele¬ 
phone  number  is  recommended  to  ex¬ 
pedite  certain  matters. 

(2)  Signatures  must  be  notarized  on 
requests  received  by  mail.  Exceptions 
may  be  made  when  the  requester  is  well 
known  to  releasing  officials,  or  sufficient 
acceptable  photo  identification  is  per¬ 
sonally  presented,  e.g.,  military  identifi¬ 
cation  card,  building  pass  or  driver’s  li¬ 
cense. 

(3)  While  it  is  not  required  as  a  con¬ 
dition  of  receiving  notification,  in  many 
cases  the  SSAN  may  be  necessary  to 
obtain  an  accurate  search  of  DCII  (DIS 
5-02)  records. 

(c)  DIS  form.  A  DIS  Request  for  No¬ 
tification/Access  Form  may  be  provided 
to  any  individual  inquiring  about  records 
pertaining  to  himself,  under  these  rules. 
It  is  desired  that  the  form  be  used:  how¬ 
ever,  requests  will  not  be  denied  if  neces¬ 
sary  information  is  provided  otherwise  in 
writing. 

§  298a. 6  Access  by  subject  individuals. 

(a)  General.  (1)  Individuals  may  re¬ 
quest  access  to  records  pertaining  to 
themselves  in  person  or  by  mail  in  ac¬ 
cordance  with  this  section.  However, 
nothing  in  this  section  shall  allow  an 
individual  access  to  any  information 
compiled  or  maintained  by  DIS  in  rea¬ 
sonable  anticipation  of  a  civil  or  criminal 
action  or  proceeding,  or  otherwise  ex¬ 
empted  under  the  provisions  of  §  298a. 14. 

(2)  A  request  for  a  pending  personnel 
security  investigation  will  be  held  in 
abeyance  until  completion  of  the  investi¬ 
gation  and  the  requester  will  be  so  noti¬ 
fied. 

(b)  Manner  of  access. 

(1)  Requests  by  mail  or  in  person  for 
access  to  DIS  records  should  be  made 
to  the  offices  specified  in  the  record  sys¬ 
tems  notices  published  in  the  Federal 
Register  by  the  Department  of  Defense. 
Information  or  assistance  may  be  ob¬ 
tained  from  the  Office  of  the  Assistant 
for  Information,  Room  2H043,  Forrestal 
Building,  1000  Independence  Avenue. 
SW,  Washington.  DC  20314. 

(2)  Any  individual  who  makes  a  re¬ 
quest  for  access  in  person  shall: 

(i)  Provide  identification  as  specified 
in  5  298a.5,  above. 

(ii)  Complete  and  sign  a  request  form. 

(3)  Any  individual  making  a  request 
for  access  to  records  by  mail  shall  in¬ 
clude  a  signed  and  notarized  statement 


to  verify  his  identity,  which  may  be  the 
DIS  request  form  if  he  has  received  one. 

(4)  Any  individual  requesting  access 
to  records  in  person  may  be  accompanied 
by  an  identified  person  of  his  own  choos¬ 
ing  while  reviewing  the  record.  If  the 
individual  elects  to  be  accompanied,  he 
shall  make  this  known  in  his  written  re¬ 
quest.  and  include  a  statement  authoriz¬ 
ing  disclosure  of  the  record  contents 
to  the  accompanying  person.  Without 
written  authorization  of  the  subject  in¬ 
dividual,  records  will  not  be  disclosed  to 
third  parties  accompanying  the  subject. 

(5)  Members  of  DIS  field  elements 
may  be  given  access  to  records  main¬ 
tained  by  the  field  elements  without  re¬ 
ferral  to  the  Office  of  Information  or 
the  records  system  manager  at  head¬ 
quarters.  An  account  of  such  access  will 
be  kept  for  reporting  purposes. 

(6»  In  all  requests  for  access,  the  re¬ 
quester  must  state  whether  he  or  she  de¬ 
sires  access  in  person  or  mailed  copies 
of  records.  During  personal  access,  where 
copies  are  made  for  retention,  a  fee  for 
reproduction  and  postage  may  be  as¬ 
sessed  as  provided  in  §  298a.  12.  Where 
copies  are  mailed  because  personal  ap¬ 
pearance  is  impractical,  there  will  be  no 
fee. 

(7»  All  individuals  who  are  not  affili¬ 
ates  of  DIS  will  be  given  access  to  rec¬ 
ords  in  the  Office  of  the  Assistant  for 
Information,  or  by  means  of  mailed 
copies. 

§  298a. 7  Medical  Records. 

(a>  General.  Medidal  records  that  are 
part  of  DIS  records  systems  will  gener¬ 
ally  be  included  with  those  records  when 
access  is  granted  to  the  subject  to  which 
they  pertain.  However,  if  it  is  determined 
that  such  access  could  have  an  adverse 
effect  upon  the  individual’s  physical  or 
mental  health,  the  medical  record  in 
question  will  be  released  only  to  a  physi¬ 
cian  named  by  the  requesting  individual. 

(b)  DIS  officials  preparing  a  record 
for  access  by  the  subject  will  coordinate 
medical  record  portions  with  the  As¬ 
sistant  for  Information. 

(c)  If  the  record  indicates  any  condi¬ 
tion  the  disclosure  of  which  might  have 
an  adverse  effect  on  the  subject,  e.g.,  a 
serious  illness,  psychiatric  condition,  etc., 
the  Assistant  for  Information  will  con¬ 
sult  with  a  competent  physician  affiliated 
with  the  Department  of  Defense  for  an 
opinion  on  the  manner  of  granting 
access. 

(d)  Guided  by  the  consulting  physi¬ 
cian’s  recommendations,  the  Assistant 
for  Information  will  then  make  appro¬ 
priate  arrangements  for  its  release. 

§  298a. 8  Request  for  eorreetion  or 
amendment. 

(a)  General.  Upon  request  and  proper 
identification  by  any  individual  who  has 
been  granted  access  to  DIS  records  per¬ 
taining  to  himself  or  herself,  that  indi¬ 
vidual  may  request,  either  in  person  or 
through  the  mail,  that  the  record  be 
amended.  Such  a  request  must  be  made 
in  writing  and  addressed  to  the  Assistant 
for  Information,  Defense  Investigative 


Service  (Record  Amendment  Request — 
D0020) ,  Washington,  DC  20314. 

(b)  Content.  The  following  informa¬ 
tion  must  be  included  to  insure  effective 
action  on  the  request: 

(1)  Description  of  the  record.  Re¬ 
questers  should  specify  the  number  of 
pages  and  documents,  the  titles  of  the 
documents,  form  numbers  if  there  are 
any,  dates  on  the  documents  and  names 
of  individuals  who  signed  them.  Any 
reasonable  description  of  the  document 
is  acceptable. 

(2)  Description  of  the  items  to  be 
amended.  The  description  of  the  pas¬ 
sages,  pages  or  documents  to  be  amended 
should  be  as  clear  and  specific  as  possible. 

(i)  Page,  line  and  paragraph  numbers 
should  be  cited  where  they  exist. 

(ii)  A  direct  quotation  of  all  or  a  por¬ 
tion  of  the  passage  may  be  made  if  it 
isn’t  otherwise  easily  identifiable.  If  the 
passage  is  long,  a  quotation  of  its  begin¬ 
ning  and  end  will  suffice. 

(iii)  In  appropriate  cases,  a  simple 
substantive  request  may  be  appropriate, 
e.g.,  “delete  all  references  to  my  alleged 
arrest  in  July  1970.” 

(iv)  If  the  requester  has  received  a 
copy  of  the  record,  he  may  submit  an 
annotated  copy  of  documents  he  wishes 
amended. 

(8)  Type  of  amendment.  The  requester 
must  clearly  state  the  type  of  amend¬ 
ment  he  is  requesting. 

(i)  Deletion  or  expungement,  i.e.,  a 
complete  removal  from  the  record  of 
data,  sentences,  passages,  paragraphs  or 
documents. 

(ii)  Correction  of  the  information  in 
the  record  to  make  it  more  accurate,  e.g., 
rectify  mistaken  identities,  dates,  data 
pertaining  to  the  individual,  etc. 

(iii)  Additions  to  make  the  record 
more  relevant,  accurate  or  timely  may  be 
requested. 

(iv)  Other  changes  may  be  requested; 
they  must  be  specifically  and  clearly  de¬ 
scribed. 

(4)  Reason  for  amendment.  Requests 
for  amendment  must  be  based  on  specific 
reasons,  included  in  writing.  Categories 
of  reasons  are  as  follows: 

(i)  Accuracy.  Amendment  may  be  re¬ 
quested  where  matters  of  fact  are  be¬ 
lieved  incorrectly  recorded,  e.g.,  dates, 
names,  addresses,  identification  numbers, 
or  any  other  information  concerning  the 
individual.  The  request,  whenever  possi¬ 
ble,  should  contain  the  accurate  infor¬ 
mation,  copies  of  verifying  documents,  or 
indication  of  how  the  information  can  be 
verified. 

(ii)  Relevance.  Amendment  may  be  re¬ 
quested  when  information  in  a  record 
is  believed  not  to  be  relevant  or  neces¬ 
sary  to  the  purposes  of  the  record  sys¬ 
tem.  (See  DOD  Federal  Register  Descrip¬ 
tions.) 

(iii)  Timeliness.  Amendment  may  be 
requested  when  information  is  thought 
to  be  so  old  as  to  no  longer  be  pertinent 
to  the  stated  purposes  of  the  records 
system.  It  may  also  be  requested  when 
there  is  recent  information  of  a  pertinent 
type  that  is  not  included  in  the  record. 
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(lv)  Completeness.  Amendment  may 
be  requested  where  Information  in  a  rec¬ 
ord  Is  Incomplete  with  respect  to  its  pur¬ 
pose.  The  data  thought  to  have  been 
omitted  should  be  Included  or  identi¬ 
fied  with  the  request. 

(v)  Fairness.  Amendment  may  be  re¬ 
quested  when  a  record  is  thought  to  be 
unfair  concerning  the  subject,  in  terms 
of  the  stated  purposes  of  the  record.  In 
such  cases,  a  source  of  additional  infor¬ 
mation  to  increase  the  fairness  of  the 
record  should  be  identified  where  possi¬ 
ble. 

(vi)  Other  reasons.  Reasons  for  re¬ 
questing  amendment  are  not  limited  to 
those  cited  above.  The  content  of  the 
records  is  authorized  in  terms  of  their 
stated  purposes  which  should  be  the 
basis  for  evaluating  them.  However,  any 
matter  believed  appropriate  may  be  sub¬ 
mitted  as  a  basis  of  an  amendment 
request. 

(vii)  Court  orders  and  statutes  may 
require  amendment  of  a  file.  While  they 
do  not  require  a  Privacy  Act  request 
for  execution,  such  may  be  brought  to 
the  attention  of  DIS  by  these  procedures. 

(c)  Verification  of  identity.  In  order 
to  assure  that  an  Individual’s  record  is 
not  accidentally  or  intentionally 
amended  by  an  unauthorized  person,  all 
requests  for  amendment  require  verifi¬ 
cation  of  identity.  (See  §  298a.5,  of  this 
part.) 

(d)  Assistance.  Individuals  seeking  to 
request  amendment  of  records  pertain¬ 
ing  to  themselves  that  are  maintained 
by  DIS  will  be  assisted  as  necessary  by 
DIS  officials.  Where  a  request  Is  incom¬ 
plete,  It  will  not  be  denied,  but  the 
requester  will  be  contacted  for  the  ad¬ 
ditional  Information  necessary  to  his 
request. 

(e)  This  section  does  not  permit  the 
alteration  of  evidence  presented  to 
courts,  boards  and  other  official  proceed¬ 
ings. 

§  298a.9  DIS  review  of  request  for 
amendment. 

(a)  General.  Upon  receipt  from  any 
Individual  of  a  request  to  amend  a  rec¬ 
ord  pertaining  to  himself  and  main¬ 
tained  by  DIS,  the  Assistant  for  Infor¬ 
mation  will  refer  such  request  to  the 
responsible  office.  Such  request  will  be 
handled  in  close  compliance  with  en¬ 
closure  4  to  DOD  Directive  5400.11,  and 
the  following  accomplished: 

(1)  A  written  acknowledgment  of  the 
receipt  of  a  request  for  amendment  of  a 
record  will  be  provided  to  the  individual 
within  10  working  days,  unless  final  ac¬ 
tion  regarding  approval  or  denial  can  be 
accomplished  within  that  time.  In  that 
case,  the  notification  of  approval  or  de¬ 
nial  will  constitute  adequate  acknowl¬ 
edgment. 

(2)  Where  there  is  a  determination  to 
grant  all  or  a  portion  of  a  request  to 
amend  a  record,  the  record  shall  be 
promptly  amended  and  the  requesting 
individual  notified.  Individuals,  agencies 
or  components  shown  by  accounting  rec¬ 
ords  to  have  received  copies  of  the  record, 
or  to  whom  disclosure  has  been  made, 
will  be  notified  of  the  amendment  by  the 


responsible  official.  Where  a  DOD  recip¬ 
ient  of  an  investigative  record  cannot  be 
located,  the  notification  will  be  sent  to 
the  personnel  security  element  of  the 
parent  Component. 

(3)  Where  there  Is  a  determination  to 
deny  all  or  a  portion  of  a  request  to 
amend  a  record,  the  office  will  promptly: 

(i)  Advise  the  requesting  individual 
of  the  specifics  of  the  refusal  and  the 
reasons; 

(ii)  Inform  the  individual  that  he  may 
request  a  review  of  the  denial (s)  from 
“Director,  Defense  Investigative  Service 
(Record  Amendment  Denial  Review), 
D0030,  Washington,  DC  20314.”  The  re¬ 
quest  should  be  brief,  in  writing,  and  en¬ 
close  a  copy  of  the  denial  correspondence. 

(b)  DIS  Determination  to  Approve 
or  Deny.  Determination  to  approve  or 
deny  any  request  to  amend  a  record,  or 
portion  thereof,  will  be  made  by  the  re¬ 
sponsible  official  following  regular  co¬ 
ordination  procedures.  Such  determi¬ 
nations  must  be  based  on  the  informa¬ 
tion  in  the  record,  the  request  for 
amendment  and  the  authorized  pur¬ 
poses  of  the  record.  Where  necessary, 
additional  investigation  or  inquiry  will 
be  made  to  verify  assertions  of  individ¬ 
uals  requesting  amendment.  Coordina¬ 
tion  will  be  made  with  the  Assistant  for 
Information  (D0020)  and  the  Assistant 
for  Legal  Affairs  (D0030)  in  such  ac¬ 
tions. 

§  298a. 10  Appeal  of  initial  amendment 
decision. 

(a)  General.  Upon  receipt  from  any 
individual  of  an  appeal  to  review  a  DIS 
refusal  to  amend  a  record,  the  Assistant 
for  Legal  Affairs  will  assure  that  such 
appeal  is  handled  in  compliance  with 
the  Privacy  Act  of  1974  and  DOD  Direc¬ 
tive  5400.11  and  accomplish  the  follow? 
lng: 

(1)  Review  the  record,  request  for 
amendment,  DIS  action  on  the  request 
and  the  denial,  and  direct  such  addi¬ 
tional  Inquiry  or  investigation  as  is 
deemed  necessary  to  make  a  fair  and 
equitable  determination. 

(2)  Recommend  to  the  Director 
whether  to  approve  or  deny  the  appeal. 

(3)  If  the  determination  is  made  to 
amend  a  record,  advise  the  Individual 
and  previous  recipients  (or  an  appropri¬ 
ate  office)  where  an  accounting  of  dis¬ 
closures  has  been  made. 

(4)  Where  the  decision  has  been  made 
to  deny  the  individual’s  appeal  to  amend 
a  record,  notify  the  individual: 

(i)  Of  the  denial  and  the  reason; 

(ii)  Of  his  right  to  file  a  concise  state¬ 
ment  of  reasons  for  disagreeing  with  the 
decision  not  to  amend  the  record; 

(iii)  That  such  statement  may  be  sent 
to  the  Assistant  for  Legal  Affairs,  DIS 
(D0030),  Washington,  DC  20314,  and 
that  it  will  be  disclosed  to  users  of  the 
disputed  record; 

(iv)  That  prior  recipients  of  the  dis¬ 
puted  record  will  be  provided  a  copy  of 
the  statement  of  disagreement,  or  if  they 
cannot  be  reached  (e.g.,  through  de¬ 
activation)  the  personnel  security  ele¬ 
ment  of  their  DOD  component 

(v)  And,  that  he  may  file  a  suit  in  a 
Federal  District  Court  to  contest  DIS’s 


decision  not  to  amend  the  disputed 
record. 

(b)  Time  limit  for  review  of  appeal.  If 
the  review  of  an  appeal  of  a  refusal  to 
amend  a  record  cannot  be  accomplished 
within  30  days,  the  Assistant  for  Legal 
Affairs  will  notify  the  individual  and 
advise  him  of  the  reasons,  and  inform 
him  of  when  he  may  expect  the  review 
to  be  completed. 

§  298a.  11  Disclosure  to  other  than  sub¬ 
ject. 

(a)  General.  No  record  contained  in 
a  system  of  records  maintained  by  DIS 
shall  be  disclosed  by  any  means  to  any 
person  or  agency  outside  the  Depart¬ 
ment  of  Defense,  except  with  the  writ¬ 
ten  consent  or  request  of  the  Individual 
subject  of  the  record,  except  as  provided 
in  this  section.  Disclosures  that  may  be 
made  without  the  request  or  consent  of 
the  subject  of  the  record  are  as  follows: 

(1)  To  those  officials  and  employees 
of  the  Department  of  Defense  who  have 
a  need  for  the  record  in  the  performance 
of  their  duties,  when  the  use  is  compati¬ 
ble  with  the  stated  purposes  for  which 
the  record  is  maintained. 

(2)  Required  to  be  disclosed  by  the 
Freedom  of  Information  Act. 

(3)  For  a  routine  use  as  described  in 
DOD  Directive  5400.11  and  DOD  publi¬ 
cation  in  the  Federal  Register. 

(4)  To  the  Census  Bureau,  National 
Archives,  the  UJS.  Congress,  the  Comp¬ 
troller  General  or  General  Accounting 
Office  under  the  conditions  specified  in 
DOD  Directive  5400.11. 

(5)  At  the  written  request  of  the  head 
of  an  agency  outside  DOD  for  a  law  en¬ 
forcement  activity  as  authorized  by  DOD 
Directive  5400.11. 

(6)  For  statistical  purposes,  in  re¬ 
sponse  to  a  court  order,  or  for  compel¬ 
ling  circumstances  affecting  the  health 
or  safety  of  an  indvidual  as  described 
in  DOD  Directive  5400.11. 

(7)  Legal  guardians  recognized  by 
the  Act. 

(b)  Accounting  of  disclosures.  Except 
for  disclosures  made  to  members  of  the 
DOD  in  connection  with  their  routine 
duties,  and  disclosures  required  by  the 
Freedom  of  Information  Act,  an  ac¬ 
counting  will  be  kept  of  all  disclosures  of 
records  maintained  in  DIS  systems  listed 
in  §  298a.4b.  An  accounting  will  be  kept 
of  all  disclosures  of  investigative  infor¬ 
mation,  system  DIS  5-01. 

(1)  Accounting  entries  will  normally 
be  kept  on  a  DIS  form,  which  will  be 
maintained  in  the  record  file  jacket,  or 
in  a  document  that  is  part  of  the  record. 

(2)  Accounting  entries  will  record  the 
date,  nature  and  purpose  of  each  dis¬ 
closure,  and  the  name  and  address  of 
the  person  or  agency  to  whom  the  dis¬ 
closure  is  made. 

(3)  An  accounting  of  disclosures  made 
to  agencies  outside  the  DOD  of  records 
in  the  Defense  Central  Index  of  Investi¬ 
gations  (DIS  5-02)  will  be  kept  as  pre¬ 
scribed  by  the  Director  of  Systems, 
DIS. 

(4)  Accounting  records  will  be  main¬ 
tained  for  at  least  5  years  after  the  last 
disclosure,  or  for  the  life  of  the  record, 
whichever  is  longer. 
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(5)  Subjects  of  DIS  records  will  be 
given  access  to  associated  accounting 
records  upon  request,  except  as  exempted 
under  8  298a.l4. 

§  298a. 12  Fees. 

Individuals  may  request  copies  for  re¬ 
tention  of  any  documents  to  which  they 
are  granted  access  in  DIS  records  per¬ 
taining  to  them.  They  will  be  charged 
only  for  the  reproduction  of  such  docu¬ 
ments,  and  postage  charges  if  applicable. 
However,  when  an  Individual  cannot  rea¬ 
sonably  appear  in  person  for  access  to 
personal  records,  there  will  be  no  charge 
for  the  first  copies  mailed  to  the  indi¬ 
vidual. 

§  298a.  13  Penalties. 

(a)  An  individual  may  bring  a  civil  ac¬ 
tion  against  the  DIS  to  correct  or  amend 
the  record,  or  where  there  is  a  refusal  to 
comply  with  an  individual  request  or 
failure  to  maintain  any  record  with  ac¬ 
curacy,  relevance,  timeliness  and  com¬ 
pleteness.  so  as  to  guarantee  fairness,  or 
failure  to  comply  with  any  other  provi¬ 
sion  of  5  U.S.C.  552a.  The  court  may  or¬ 
der  correction  or  amendment.  It  may 
assess  against  the  United  States  rea¬ 
sonable  attorney  fees  and  other  costs,  or 
may  enjoin  the  DIS  from  withholding 
the  records  and  order  the  production  to 
the  complainant. 

(b)  Where  it  is  determined  that  the 
action  was  willful  or  intentional  with  re¬ 
spect  to  5  U.S.C.  552a(g)  (1)  (C)  or  <D>, 
the  United  States  shall  be  liable  for  the 
actual  damages  sustained,  but  in  no  case 
less  than  the  sum  of  $1,000  and  the  costs 
of  the  action  with  attorney  fees. 

(c)  Criminal  penalties  may  be  imposed 
against  an  officer  or  employee  of  the  DIS 
who  fully  discloses  material,  which  he 
knows  is  prohibited  from  disclosure,  or 
who  willfully  maintains  a  system  of  rec¬ 
ords  without  the  notice  requirements ;  or 
against  any  person  who  knowingly  and 
willfully  requests  or  obtains  any  record 
concerning  an  individual  from  an  agency 
under  false  pretenses.  These  offenses 
shall  be  misdemeanors  with  a  fine  not  to 
exceed  $5,000. 

§  298a.  14  Exemptions. 

(a)  General.  The  Director  of  the  De¬ 
fense  Investigative  Service  establishes 
the  following  exemptions  of  records  sys¬ 
tems  (or  portions  thereof)  from  the  pro¬ 
visions  of  these  rules,  and  other  indi¬ 
cated  portions  of  Pub.  L.  93-579,  in  this 
section.  They  may  be  exercised  only  by 
the  Director  of  the  DIS,  his  Assistant  for 
Information,  Assistant  for  Legal  Affairs, 
Director  of  Operational  Policy,  or  Direc¬ 
tor  of  Personnel.  Exemptions  will  be  ex¬ 
ercised  only  when  necessary  for  a  spe¬ 
cific,  significant  and  legitimate  reason 
connected  with  the  purpose  of  a  records 
system,  and  not  simply  because  they  are 
authorized  by  statute.  Personal  records 
releasable  under  the  provisions  of  5 
U.S.C.  552  will  not  be  withheld  from 
subject  individuals  based  on  these  ex¬ 
emptions. 

(b)  All  systems  of  records  maintained 
by  DIS  shall  be  exempt  from  the  require¬ 
ments  of  5  U.S.C.  552a(d)  pursuant  to  5 


U.S.C.  552a(k)(l)  to  the  extent  that 
the  system  contains  any  information 
properly  classified  under  Executive  Or¬ 
der  11652  and  which  is  required  by  the 
Executive  Order  to  be  withheld  in  the 
interest  of  national  defense  or  foreign 
policy.  This  exemption,  which  may  be 
applicable  to  parts  of  all  systems  of  rec¬ 
ords,  is  necessary  because  certain  record 
systems  not  otherwise  specifically  desig¬ 
nated  for  exemptions  herein  may  con¬ 
tain  items  of  information  that  have  been 
properly  classified. 

(c)  Investigative  files — DIS  5-01. 

(1)  Exemption.  5  U.S.C.  552a (c)  <3» 
and  (4);  (d>:  (e>  (1>,  (2),  (3),  (5)  and 
(8> :  (g) ;  and  (o) ; 

(2 >  Authority.  5  U.S.C.  552a(j)(2>; 

(3)  Reasons.  Records  maintained  b;r. 
or  at  the  direction  of  the  DIS  Special 
Cases  Division  include  criminal  investi¬ 
gations  for  which  DIS  has  primary  re¬ 
sponsibility  and  certain  reports  and  re¬ 
ciprocal  investigations,  rs  well  as  secu¬ 
rity  or  counterintelligence  information, 
which  may  be  used  in  criminal  prosecu¬ 
tion.  The  withholding  of  this  informa¬ 
tion  will  be  to  the  extent  necessary  to 
allow  the  DIS  Special  Cases  Division,  a 
criminal  law  enforcement  component,  to 
conduct  effective  investigations  into  al¬ 
leged  unlawful  activity,  or  crime  condu¬ 
cive  situations,  without  jeopardizing  such 
investigations.  Knowledge  of  the  investi¬ 
gations  of  the  Special  Cases  Division 
would  enable  subjects  or  suspects  to  take 
actions  to  prevent  detection  of  criminal 
activities,  fabricate  evidence,  influence 
witnesses  improperly,  conceal  or  destroy 
evidence,  or  to  escape  prosecution.  It 
could  also  lead  to  Intimidation  of,  or 
harm  to,  sources,  informants,  witnesses 
and  their  families.  Information  from  this 
system  will  be  withheld  only  to  the  ex¬ 
tent  that  its  release  would  interfere  with 
such  investigations. 

(d>  Investigative  files — DIS  5-01. 

(1)  Exemption.  5  U.S.C.  552a(c)(3); 
(d>:  (e)  (1)  and  (4)  (G>  (H)  and  (I); 
<f>; 

<2>  Authority.  5  U.S.C.  552a (k)  (2) ; 

(3 »  Reasons.  This  exemption  will  per¬ 
mit  the  DIS  to  conduct  certain  law  en¬ 
forcement  investigations  effectively,  and 
without  compromise,  to  relay  law  en¬ 
forcement  information  without  compro¬ 
mise.  and  to  protect  the  identities  of 
sources  who  would  not  otherwise  provide 
information.  Investigatory  material,  in¬ 
cluding  certain  reciprocal  investigations 
and  counterintelligence  information, 
must  be  exempted  until  such  time  action 
is  taken  regarding  the  allegations,  but 
after  that  time  only  to  the  extent  that 
the  information  would  identify  a  con¬ 
fidential  source  who  furnished  informa¬ 
tion  underran  express  promise  that  the 
source’s  identity  would  be  held  in  confi¬ 
dence  (or  prior  to  the  effective  date  of 
the  Act,  under  an  implied  promise). 

(e)  Investigative  files — DIS  5-01. 

(1)  Exemption.  5  U.S.C.  552a(c)  (3) ; 
(d;)  (e)(1)  and  (4)  (G),  (H)  and  (I); 
<f>: 

(2)  Authority.  5  U.S.C.  552a(k)  (3) ; 

(3)  Reasons.  DIS  investigatory  ma¬ 
terial  exempted  under  this  authority  is 


maintained  in  connection  with  assisting 
the  US  Secret  Service  <USSS‘  to  pro¬ 
vide  protective  services  to  the  President 
of  the  United  States  and  other  individ¬ 
uals  pursuant  to  18  U.S.C.  3056.  This  ex¬ 
emption  provision  will  enable  the  DIS  to 
continue  its  statutory  support  of  this 
activity  without  compromising  the  con¬ 
tents  of  Secret  Service  intelligence  files 
or  DIS  investigative  activities. 

<f>  Investigative  files — DIS  5-01. 

(1)  Exemption.  5  U.S.C.  552a(c)(3); 
<d>  and  (f ) ; 

(2*  Authority.  5  U.S.C.  552a(k)(5); 

<3>  Reasons.  Personnel  security  in¬ 
vestigatory  material  is  exempt  to  the 
extent  that  the  disclosure  of  such  mate¬ 
rial  would  reveal  the  identity  of  a  source 
who  furnished  information  under  an  ex¬ 
press  promise  that  the  source’s  identity 
would  be  hel  l  in  confidence  (or  prior  to 
the  effective  date  of  the  Act,  under  an 
implied  promise).  This  exemption  pro¬ 
vision  will  allow  the  DIS  to  collect  in¬ 
formation  necessary  for  personnel  secu¬ 
rity  investigations  from  certain  sources 
who  would  otherwise  be  unwilling  to 
provide  it.  This  exemption  will  be  ap¬ 
plied  only  in  those  cases  where  it  is  clear¬ 
ly  necessary  to  grant  confidentiality  for 
the  performance  of  an  authorized  inves¬ 
tigative  function. 

(g)  Defense  central  index  of  inves¬ 
tigations  DCII — DIS  5-02. 

(1)  Exemption.  5  U.S.C.  522a(c)(3> 
and  (4);  (d) ;  and  (e)(8). 

(2)  Authority.  5  U.S.C.  552a(j)(2). 

(3)  Reasons.  This  exemption  will  al¬ 
low  contributing  criminal  law  enforce¬ 
ment  components  to  conduct  effective  in¬ 
vestigations  into  alleged  unlawful  activ¬ 
ity  or  crime  conducive  situations  and  use 
the  DCII  without  jeopardizing  such  in¬ 
vestigations.  The  disclosure  of  investiga¬ 
tions  conducted  by  criminal  law  enforce¬ 
ment  components  would  enable  subjects 
or  suspect  individuals  to  take  actions  to 
prevent  detection  of  criminal  activities, 
destroy  or  fabricate  evidence,  intimidate 
or  interfere  with  witnesses,  or  take  ac¬ 
tion  to  escape  prosecution.  Information 
from  this  system  will  be  withheld  only 
to  the  extent  that  its  release  would  in¬ 
terfere  with  such  investigations. 

(h)  Defense  case  control  system 
(DCCS)  z—DIS  5-04. 

(1)  Exemption.  5  U.S.C.  552a(c)(3) 

(4) ;  (d)  and  (e)(8). 

<2i  Authority.  5  U.S.C.  552a(j)(2). 

(3)  Reasons.  This  exemption  will  al¬ 
low  the  DIS  Special  Cases  Division,  a 
criminal  law  enforcement  element  to 
conduct  effective  investigations  into  al¬ 
leged  unlawful  activity  or  crime  condu¬ 
cive  situations  and  use  the  DCCS  with¬ 
out  jeopardizing  such  investigations. 
The  disclosure  of  investigations  con¬ 
ducted  by  the  Special  Cases  Division 
would  enable  subjects  to  take  actions  to 
prevent  detection  of  criminal  activities, 
fabricate  or  destroy  evidence,  intimidate 
witnesses  or  to  escape  prosecution.  In¬ 
formation  from  this  system  will  be  with¬ 
held  only  to  the  extent  that  its  release 
would  interfere  with  such  investigations. 

§  298a. 13  IMS  implementation  policies. 

(a)  General.  The  implementation  of 
the  Privacy  Act  of  1974  within  DIS  is  as 
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prescribed  by  DOD  Directive  5400.11.  This 
section  provides  special  rules  and  infor¬ 
mation  that  extend  or  amplify  DOD  poli¬ 
cies  with  respect  to  matters  of  particular 
concern  to  the  Defense  Investigative 
Service. 

(b)  Privacy  Act  rules  application.  Any 
request  concerning  personal  record  in¬ 
formation  in  a  system  of  records,  by  the 
individual  to  whom  such  information 
pertains,  for  access,  amendment,  correc¬ 
tion,  accounting  of  disclosures,  etc.,  will 
be  governed  by  the  Privacy  Act  of  1974, 
DOD  Directive  5400.11  and  these  rules 
exclusively.  Any  denial  or  exemption  of 
all  or  part  of  a  record  from  notification, 
access,  disclosure,  amendment  or  other 
provision,  will  also  be  processed  under 
these  rules,  unless  court  order  or  other 
competent  authority  directs. 

(c)  Amendment  of  DIS  directives. 
Upon  final  adoption  of  these  rules,  re¬ 
sponsible  DIS  officials  shall  review  all 
existing  doctrine,  policy  and  procedures 
In  all  DIS  Instructions,  regulations  and 
directives,  and  bring  them  into  compli¬ 
ance  with  these  rules,  The  Privacy  Act 
of  1974  and  DOD  Directive  5400.11. 

(d)  First  amendment  rights.  No  DIS 
official  or  element  may  maintain  any 
Information  pertaining  to  the  exercise  by 
an  individual  of  his  rights  under  the 
First  Amendment  without  the  permission 
of  that  individual  unless  such  collection 
is  specifically  authorized  by  statute  or 
necessary  to  and  within  the  scope  of  an 
authorized  law  enforcement  activity. 

(e)  Standards  of  accuracy  and  valida¬ 
tion  of  records. 

(1)  All  individuals  or  elements  within 
DIS  which  create  or  maintain  records 
pertaining  to  individuals  will  Insure  that 
they  are  reasonably  accurate,  relevant, 
timely  and  complete  to  serve  the  purpose 
for  which  they  are  maintained  and  to 
assure  fairness  to  the  individual  to  whom 
they  pertain.  Information  that  is  not 
pertinent  to  a  stated  purpose  of  a  system 
of  records  will  not  be  maintained  within 
those  records.  Officials  compiling  inves¬ 
tigatory  records  will  make  every  reason¬ 
able  effort  to  assure  that  only  reports 
that  are  impartial,  clear,  accurate,  com¬ 
plete,  fair  and  relevant  with  respect  to 
the  authorized  purpose  of  such  records 
are  Included,  and  that  reports  not  meet¬ 
ing  these  standards  or  serving  such  pur¬ 
poses  are  not  included  in  such  records. 

(2)  Prior  to  dissemination  to  an  indi¬ 
vidual  or  agency  outside  DOD  of  any  rec¬ 
ord  about  an  individual  (except  for  a 
Freedom  of  Information  Act  action  or 
access  by  a  subject  individual  under  these 
rules)  the  disclosing  DIS  official  will  by 
review,  make  a  reasonable  effort  to  as¬ 
sure  that  such  record  is  accurate,  com¬ 
plete.  timely,  fair  and  relevant  to  the 
purpose  for  which  they  are  maintained. 

(e)  The  defense  central  index  of  in¬ 
vestigations  ( DCII ).  It  is  the  poliey  of 
DIS,  as  custodian,  that  each  DOD  com¬ 
ponent  or  element  that  has  direct  access 
to  or  contributes  records  to  the  DCII 
(DIS  5-02),  Is  individually  responsible 
for  compliance  with  The  Privacy  Act  of 


1974  and  DOD  Directive  5400.11  with  re¬ 
spect  to  requests  for  notification,  requests 
for  access  by  subject  individuals,  granting 
of  such  access,  request  for  amendment 
and  corrections  by  subjects,  making 
amendments  or  corrections,  other  dis¬ 
closures,  accounting  for  disclosures  and 
the  exercise  of  exemptions,  insofar  as 
they  pertain  to  any  record  placed  in  the 
DCII  by  that  component  or  element.  Any 
component  or  element  of  the  DOD  that 
makes  a  disclosure  of  any  record  what¬ 
soever  to  an  individual  or  agency  outside 
the  DOD,  from  the  DCII,  is  individually 
responsible  to  maintain  an  accounting  of 
that  disclosure  as  prescribed  by  The  Pri¬ 
vacy  Act  of  1974  and  DOD  Directive 
5400.11  and  to  notify  the  element  placing 
the  record  in  the  DCII  of  the  disclosure. 
Use  of  and  compliance  with  the  proce¬ 
dures  of  the  DCII  Disclosure  Accounting 
System  will  meet  these  requirements. 
Any  component  or  element  of  DOD  with 
access  to  the  DCII  that,  in  response  to  a 
request  concerning  an  individual,  discov¬ 
ers  a  record  pertaining  to  that  individual 
placed  in  the  DCII  by  another  compo¬ 
nent  or  element,  may  refer  the  requester 
to  the  DOD  component  that  placed  the 
record  into  the  DCII  without  making  an 
accounting  of  such  referral,  although  it 
involves  the  divulging  of  the  existence 
of  that  record.  Generally,  consultation 
with,  and  referral  to,  the  component  or 
element  placing  a  record  in  the  DCII 
should  be  effected  by  any  component  re¬ 
ceiving  a  request  pertaining  to  that  rec¬ 
ord  to  insure  appropriate  exercise  of 
amendment  or  exemption  procedures. 

(f)  Investigative  operations. 

(1)  DIS  agents  must  be  thoroughly 
familiar  with  and  understand  these  rules 
and  the  authorities,  purposes  and  routine 
uses  of  DIS  investigative  records,  and 
be  prepared  to  explain  them  and  the  ef¬ 
fect  of  refusing  information  to  all 
sources  of  investigative  information,  in¬ 
cluding  subjects,  dining  interview,  in 
response  to  questions  that  go  beyond  the 
required  printed  and  oral  notices.  Agents 
shall  be  guided  by  reference  (f )  §  298a.2, 
in  this  respect. 

(2)  All  sources  may  be  advised  that 
the  subject  of  an  Investigative  record 
may  be  given  access  to  it,  but  that  the 
identities  of  sources  may  be  withheld 
under  certain  conditions.  Such  advise¬ 
ment  will  be  made  as  prescribed  in 
§298a.2(f),  and  the  interviewing  agent 
may  not  urge  a  source  to  request  a  grant 
of  confidentiality.  Such  pledges  of  con¬ 
fidence  will  be  given  sparingly  and  then 
only  when  required  to  obtain  information 
relevant  and  necessary  to  the  stated  pur¬ 
pose  of  the  investigative  information  be¬ 
ing  collected. 

(3)  Directors  of  DIS  investigative  con¬ 
trol  elements  will  maintain  statistics  on 
the  relative  number  of  times  confidenti¬ 
ality  is  granted  sources,  and  the  general 
types  of  sources  and  cases  in  which  this 
is  done. 

(g)  J Son-system  -information  on  in¬ 
dividuals.  The  following  information  Is 
not  considered  part  of  personal  records 


systems  reportable  under  the  Privacy 
Act  of  1974  and  may  be  maintained  by 
DIS  members  for  ready  Identification, 
contact,  and  property  control  purposes 
only.  If  at  any  time  the  information  de¬ 
scribed  in  this  paragraph  is  to  be  used 
for  other  than  these  purposes,  that  in¬ 
formation  must  become  part  of  a  re¬ 
ported,  authorized  record  system.  No 
other  information  concerning  individ¬ 
uals  except  that  described  in  the  rec¬ 
ords  systems  notice  and  this  paragraph 
may  be  maintained  within  DIS. 

(1)  Identification  information  at 
doorways,  building  directories,  desks, 
lockers,  nametags,  etc. 

(2)  Identification  in  telephone  direc¬ 
tories,  locator  cards  and  rosters. 

(3)  Geographical  or  agency  contact 
cards. 

(4)  Property  receipts  and  control  logs 
for  building  passes,  credentials,  vehicles, 
weapons,  etc. 

(5)  Temporary  personal  working  notes 
kept  solely  by  and  at  the  initiative  of 
individual  members  of  DIS  to  facilitate 
their  duties. 

(h)  Notification  of  prior  recipients. 
Whenever  a  decision  is  made  to  amend 
a  record,  or  a  statement  contesting  a 
DIS  decision  not  to  amend  a  record  Is 
received  from  the  subject  Individual, 
prior  recipients  of  the  record  identified 
in  disclosure  accountings  will  be  notified 
to  the  extent  possible.  In  some  cases, 
prior  recipients  cannot  be  located  due  to 
reorganization  or  deactivations  (e.g., 
US  Military  Assistance  Command,  Viet¬ 
nam)  .  In  these  cases,  the  personnel  secu¬ 
rity  element  of  the  receiving  Defense 
Component  will  be  sent  the  notification 
or  statement  for  appropriate  action. 

(i)  Oumership  of  DIS  investigative 
records.  Investigative  records  created  or 
compiled  by  DIS  remain  DIS  records 
when  provided  to  other  agencies,  com¬ 
ponents  or  elements  for  adjudication  or 
other  personnel  actions.  Such  provision 
is  temporary  and  DIS  investigative  docu¬ 
ments  should  not  permanently  become 
part  of  the  records  of  another  system  of 
records  except  by  an  official  action  such 
as  a  trial  or  board  authorized  by  statute. 

j.  Consultation  and  referral.  DIS  sys¬ 
tem  of  records  may  contain  records  orig¬ 
inated  by  other  components  or  agencies 
which  may  have  claimed  exemptions  for 
them  under  the  Privacy  Act  of  1974. 
When  any  action  that  may  be  exempted 
is  initiated  concerning,  such  a  record, 
consultation  with  the  originating  agency 
or  component  will  be  effected.  Where  ap¬ 
propriate  such  records  will  be  referred  to 
the  originating  component  or  agency 
for  approval  or  disapproval  of  the  ac¬ 
tion. 

Bernard  J.  O’Donnell, 

Acting  Director, 
Defense  Investigative  Service. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives  OASD  ( Comptroller ) . 

August  14,  1976. 

[FR  Doc.75-22202  Tiled  8-25-75;  8 : 45  am] 
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Defense  Mapping  Agency 
[  32  CFR  Part  295c  ] 

PERSONAL  PRIVACY  AND  RIGHTS  OF  IN¬ 
DIVIDUALS  REGARDING  THEIR  PER¬ 
SONAL  RECORDS 

Proposed  Rulemaking 

Notice  is  hereby  given  that  the  Direc¬ 
tor  of  the  Defense  Mapping  Agency  pro¬ 
poses  to  change  32  CFR  Part  295  by 
adding  Part  295c  in  order  to  implement 
the  provisions  of  the  Privacy  Act  of  1974 
(Pub.  L.  93-579,  88  Stat.  1896) .  Part  295c 
establishes  regulations  designed  to  pro¬ 
tect  the  privacy  interests  of  individuals 
and  to  safeguard  the  privacy  of  indivi¬ 
duals  identified  in  records  maintained  by 
the  Defense  Mapping  Agency  (DMA). 

The  significant  portions  of  Part  295c 
provide  for  procedures  for  requests  for 
information,  access  to  and  disclosure  of 
records,  and  the  action  to  be  taken  by 
the  DMA  in  response  to  such  requests. 
This  regulation  further  contains  pro¬ 
visions  for  accounting  of  disclosures 
made;  requests  for  amendment  of  a 
record;  appeals  from  refusal  to  amend 
a  record,  and  fees  for  copying  and  mail¬ 
ing  records.  In  addition,  these  regula¬ 
tions  designate  certain  systems  of  records 
maintained  by  the  Defense  Mapping 
Agency  for  exemptions  pursuant  to  the 
specific  exemption  provisions  of  the  Act. 

Interested  parties  may  participate  In 
this  rulemaking  by  filing  with  the  Coun¬ 
sel,  Headquarters,  Defense  Mapping 
Agency,  Building  56,  U.S.  Naval 
Observatory,  Washington,  D.C.  20305,  on 
or  before  September  25,  1975,  written 
data,  views  or  arguments.  All  suggestions 
for  changes  in  the  text  should  be  accom¬ 
panied  by  drafts  of  the  language  thought 
necessary  to  accomplish  the  desired 
change  and  should  be  supported  by  state¬ 
ments  and  arguments  relating  the  pro¬ 
posed  change  to  the  Privacy  Act  of  1974. 

Accordingly,  pursuant  to  sections  3  and 
4  of  the  Administrative  Procedure  Act 
and  the  Privacy  Act  of  1974  (Pub.  L.  93- 
579,  88  Stat.  1896) ,  Title  32  of  the  Code 
of  Federal  Regulations,  Part  295c  is  pro¬ 
posed  as  follows; 

PART  295c— PERSONAL  PRIVACY  AND 
RIGHTS  OF  INDIVIDUALS  REGARDING 
THEIR  PERSONAL  RECORDS 

Sec. 

295c.  1  Purpose  and  scope. 

29 5c.  2  Definitions. 

295c. 3  Procedures  for  requests  for  Infor¬ 
mation  pertaining  to  Individual 
records  in  a  record  system. 

295c. 4  Disclosure  of  requested  Information 

to  Individuals. 

295c.5  Request  for  correction  or  amend¬ 
ment  to  record. 

295C.6  Agency  review  of  request. 

295c.7  Appeal  of  Initial  adverse  agency  de¬ 
termination  on  correction  or 
amendment. 

295c  .8  Disclosure  of  record  to  person  other 
than  the  Individual  to  whom  it 
pertains. 

295C.9  Fees. 

296C.10  Penalties. 

295c.ll  Specific  exemptions. 

!  Authority:  Pub.  L.  93-579,  secs.  552a  (f) 
and  (k);  6  U.S.C.  552a  (f)  and  (k>. 


§  295c.  1  Purpose  and  scope. 

(a)  This  regulation  is  published  pur¬ 
suant  to  the  Privacy  Act  of  1974,  Pub. 
L.  93-579,  88  Stat.  1896,  5  U.S.C.  552a 
(hereinafter  the  “Privacy  Act”).  This 
regulation: 

(1)  Establishes  or  advises  of  proce¬ 
dures  whereby  an  individual  can  (i)  re¬ 
quest  notification  of  whether  the  De¬ 
fense  Mapping  Agency  (DMA)  main¬ 
tains  or  has  disclosed  a  record  pertain¬ 
ing  to  him  in  any  nonexempt  system  of 
records,  (ii)  request  a  copy  or  other 
access  to  such  a  record  or  to  an  account¬ 
ing  of  its  dislosure,  (iii)  request  that  the 
record  be  amended  and  (iv)  appeal  any 
initial  adverse  determination  of  any  such 
request; 

(2)  Specifies  those  systems  of  records 
which  the  Director,  Headquarters  DMA 
has  determined  to  be  exempt  from  the 
procedures  established  by  this  regulation 
and  from  certain  provisions  of  the  Pri¬ 
vacy  Act.  DMA  policy  encompasses  the 
safeguarding  of  individual  privacy  from 
any  misuse  of  DMA  records  and  the  pro¬ 
vision  of  the  fullest  access  practicable 
to  individuals  to  DMA  records  concern¬ 
ing  them. 

§  295c. 2  Definitions. 

As  used  in  this  part: 

“Individual”  means  a  natural  person 
who  is  a  citizen  of  the  United  States  or 
an  alien  lawfully  admitted  for  perma¬ 
nent  residence.  A  legal  guardian  or  the 
parent  of  a  minor  have  the  same  rights 
as  the  individual  and  may  act  on  behalf 
of  the  individual. 

“Maintain”  means  to  collect,  use  or 
disseminate  records  on  individuals. 

“Record”  means  any  item,  collection 
or  grouping  of  information  about  an  in¬ 
dividual  that  is  maintained  by  the  DMA 
or  a  Component  thereof.  Including,  but 
not  limited  to,  his  education,  financial 
transactions,  medical  history  and  crim¬ 
inal  or  employment  history  and  that  con¬ 
tains  his  name  or  the  identifying  num¬ 
ber,  symbol  or  other  identifying  partic¬ 
ulars  assigned  to  the  individual  such  as 
a  finger  or  voice  print  or  a  photograph. 

“System  of  records”  means  a  group  of 
any  records  under  the  control  of  the 
DMA  or  a  Component  thereof  from 
which  information  is  retrieved  by  the 
name  of  an  individual  or  by  some  identi¬ 
fying  number  or  symbol  or  other  iden¬ 
tifying  particular  assigned  to  the 
individual. 

“Routine  use”  means  (with  respect  to 
the  disclosure  of  a  record),  the  use  of 
such  record  for  a  purpose  which  is  com¬ 
patible  with  the  purpose  for  which  it 
was  collected.  Routine  use  encompasses 
not  only  common  or  ordinary  uses  but 
also  all  the  proper  and  necessary  uses 
of  the  record  even  if  such  use  occurs 
infrequently. 

§  295c.3  Procedures  for  requests  for  in¬ 
formation  pertaining  to  individual 
records  in  a  record  system. 

(a)  Upon  request  in  person  or  by  mail 
any  individual,  as  defined  in  §  295C.2  of 
this  Part,  shall  be  informed  whether  or 


not  any  DMA  system  of  records  contains 
a  record  pertaining  to  him. 

(b)  Any  individual  requesting  such  in¬ 
formation  in  person  may  present  him¬ 
self  at  HQ  DMA  or  at  the  principal  office 
of  the  DMA  Component  (please  refer  to 
the  DMA  address  list  at  §  295c.3(e)  of 
this  Part)  thought  to  maintain  the  rec¬ 
ord  in  question  and  shall  provide: 

(1)  Information  sufficient  to  identify 
the  record,  e.g.,  the  individual’s  own 
name,  date  of  birth,  place  of  birth,  and, 
if  possible,  an  indication  of  the  type  of 
record  believed  to  contain  information 
concerning  the  individual,  and, 

(2)  Acceptable  identification  to  verify 
the  individual’s  identity,  e.g.,  driver’s  li¬ 
cense,  employee  identification  card  or 
medicare  card. 

(c)  Any  individual  requesting  such  in¬ 
formation  by  mail  shall  address  his  re¬ 
quest  to  the  Director,  Defense  Mapping 
Agency,  or  to  the  Director  of  the  DMA 
Component  (refer  to  §295c.3(e)  of  this 
Part  for  address  list)  thought  to  main¬ 
tain  the  record  in  question  and  shall  in¬ 
clude  in  such  request  the  following: 

(1)  Information  sufficient  to  identify 
the  record,  e.g.,  the  individual’s  own 
name,  date  of  birth,  place  of  birth,  and, 
if  possible,  an  indication  of  the  type  of 
record  believed  to  contain  information 
concerning  the  individual,  and, 

(2)  A  signed,  notarized  statement  to 
verify  his  identity,  if,  in  the  opinion  of 
the  DMA  custodian  of  the  record,  the 
sensitivity  of  the  material  involved  war¬ 
rants. 

(d)  DMA  Procedures  on  Requests  for 
Information.  Upon  receipt  of  a  request 
for  information  made  in  accordance  with 
these  regulations,  notice  of  the  existence 
or  nonexistence  of  any  records  described 
in  such  requests  will  be  furnished  to  the 
requesting  party  within  ten  working 
days  of  receipt. 

(e)  DMA  Headquarters  and  Compo¬ 
nent  address  list: 

(1)  Director,  Defense  Mapping  Agen¬ 
cy,  Building  56,  U.S.  Naval  Observatory, 
Washington,  D.C.  20305. 

(2)  Director,  DMA  Aerospace  Center, 
St.  Louis  Air  'Force  Station,  Missouri 
63118. 

(3)  Director,  DMA  Hydrographic  Cen¬ 
ter,  Washington,  D.C.  20390. 

(4)  Director,  DMA  Topographic  Cen¬ 
ter,  6500  Brooks  Lane,  N.W.,  Washing¬ 
ton,  D.C.  20315. 

(5)  Director,  Defense  Mapping  School, 
Fort  Belvoir,  Virginia  22060. 

(6)  Director,  Inter  American  Geodetic 
Survey,  APO  New  York  09827. 

§  295c.4  Disclosure  of  requested  infor¬ 
mation  to  individuals. 

(a)  Upon  request  by  an  individual 
made  in  accordance  with  the  procedures 
set  forth  in  this  section,  such  individual 
shall  be  granted  access  to  any  record  per¬ 
taining  to  him  which  is  contained  in  a 
nonexempt  DMA  system  of  records.  How¬ 
ever,  nothing  in  this  section  shall  allow 
an  individual  access  to  any  information 
compiled  by  DMA  in  reasonable  anticipa¬ 
tion  of  a  civil  or  criminal  action  or 
proceeding. 
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Ob)  Procedures  for  requests  for  access 
to  records.  Any  individual  may  request 
access  to  a  DMA  record  pertaining  to  him 
in  person  or  by  mail. 

(1)  Any  individual  making  such  re¬ 
quest  in  person  shall  present  himself  at 
Headquarters  Defense  Mapping  Agency, 
or  at  the  principal  office  of  the  DMA 
Component  (refer  to  §  295c.3(e)  of  this 
Part  for  address  list)  thought  to  main¬ 
tain  such  record  and  shall  provide  identi¬ 
fication  to  verify  the  individual’s  iden¬ 
tity,  e.g.,  driver’s  license,  employee  iden¬ 
tification  card,  or  medicare  card. 

(2)  Any  individual  making  a  request 
for  access  to  records  by  mail  shall  address 
such  request  to  the  Director,  Defense 
Mapping  Agency,  or  the  Director  of  the 
DMA  Component  (refer  to  §  295c.3(e)  of 
this  Part  for  address  list)  thought  to 
maintain  the  record  in  question,  and 
shall  include  therein  a  signed,  notarized 
statement  to  verify  his  identity. 

(3)  Any  individual  requesting  access 
to  records  under  this  section  in  person 
may  be  accompanied  by  a  person  of  his 
own  choosing  while  reviewing  the  record 
requested.  If  an  individual  elects  to  be 
so  accompanied  he  shall  give  notice  of 
such  election  in  his  request  and  shall 
provide  a  written  statement  authorizing 
disclosure  of  the  record  in  the  presence  of 
the  accompanying  person.  Failure  to  so 
notify  DMA  In  a  request  for  access  shall 
be  deemed  to  be  a  decision  by  the  indi¬ 
vidual  not  to  be  accompanied. 

(c)  DMA  determination  of  requests  for 
access.  (1)  Upon  receipt  of  a  request 
made  in  accordance  with  this  section, 
the  Staff  Director  of  the  Headquarters 
or  Component  Staff  Element  having  re¬ 
sponsibility  for  maintenance  of  the  re¬ 
cord  in  question,  or  his  delegate  shall: 

(1)  Determine  whether  or  not  such  re¬ 
quest  shall  be  granted. 

Oil)  Make  such  determination  and 
provide  notification  within  30  working 
days  after  receipt  of  such  request. 

(ill)  Notify  the  individual  that  fees 
for  reproducing  copies  of  records  will  be 
assessed  and  should  be  remitted  before 
the  copies  may  be  delivered.  Fee  sched¬ 
ule  and  rules  for  assessing  fees  are  con¬ 
tained  in  S  295c. 9  of  this  Part. 

(iv)  Requests  for  access  to  personal 
records  may  be  denied  only  after  consul¬ 
tation  with  Council  of  a  DMA  Compo¬ 
nent,  when  available,  or  the  Counsel, 
Headquarters  DMA,  in  all  other  cases,  to 
determine  that  such  denial  is  authorized 
by  the  Act. 

(2)  If  access  to  a  record  is  denied  be¬ 
cause  such  information  has  been  com¬ 
piled  by  DMA  in  reasonable  anticipation 
of  a  civil  or  criminal  action  or  proceed¬ 
ing,  the  individual  will  be  notified  of 
such  determination  and  his  right  to  judi¬ 
cial  appeal  under  5  U.S.C.  552a(g). 

(d)  Manner  of  providing  access.  (1)  If 
access  is  granted,  the  individual  making 
the  request  shall  notify  the  DMA 
whether  the  records  requested  are  to  be 
copied  and  mailed  to  him. 

(2)  If  the  records  are  to  be  made  avail¬ 
able  for  personal  inspection  the  individ¬ 
ual  shall  arrange  for  a  mutually  agree¬ 
able  time  and  place  for  inspection  of  the 
record.  The  DMA  reserves  the  right  to 
require  the  presence  of  a  DMA  officer  or 


employee  during  personal  inspection  of 
any  record  pursuant  to  this  section  and 
to  request  of  the  individual  that  he  pro¬ 
vide  a  signed  acknowledgment  of  the 
fact  that  access  to  the  record  in  question 
was  granted  him  by  the  DMA. 

§  295c. 5  Request  for  correction  or 
amendment  to  record. 

(a)  Any  individual  may  request 
amendment  of  a  record  pertaining  to 
him  in  accordance  with  the  following 
procedure. 

(b)  After  inspection  of  a  record  per¬ 
taining  to  him  an  individual  may  file  a 
request  in  writing  with  the  Staff  Director 
of  the  DMA  Headquarters  or  Component 
Staff  Element  having  responsibility  for 
maintenance  of  the  record  in  question 
for  amendment  of  a  record.  Such  re¬ 
quests  shall  specify  the  particular  por¬ 
tions  of  the  record  to  be  amended,  the 
desired  amendments  and  the  reasons, 
supported  by  documentary  proof,  if 
available,  therefor. 

§  295c. 6  Agency  review  of  request  for 
correction  or  amendment  of  record. 

(a)  Not  later  than  10  working  days 
after  receipt  of  a  request  to  amend  a 
record,  in  whole  or  in  part,  the  Staff 
Director  of  the  DMA  Headquarters  or 
Component  Staff  Element  having  re¬ 
sponsibility  for  maintenance  of  the  rec¬ 
ord  in  question  shall  make  any  correction 
of  any  portion  of  the  record  which  the 
individual  believes  is  not  accurate,  rele¬ 
vant,  timely  or  complete  and  thereafter 
inform  the  individual  of  such  correction; 
or  inform  the  individual  by  certified  mail, 
return  receipt  requested,  of  refusal  to 
amend  the  record  setting  forth  the  rea¬ 
sons  therefor  and  notifying  the  individ¬ 
ual  of  his  right  to  appeal  the  decision  to 
the  Director,  Defense  Mapping  Agency 
in  accordance  with  5  295c. 7  of  this  Part. 

(b)  Requests  for  amendment  of  a  rec¬ 
ord  may  be  refused  only  after  consulta¬ 
tion  with  Counsel  at  a  DMA  Component, 
when  available,  or  the  Counsel,  HQ  DMA, 
in  all  other  cases,  to  determine  that  such 
refusal  is  authorized  by  the  Act. 

(c)  Any  person  or  other  agency  to 
whom  the  record  has  been  previously 
disclosed  shall  be  informed  of  any  cor¬ 
rection  or  notation  of  dispute  with  re¬ 
spect  to  such  records. 

(d)  These  provisions  for  amending 
records  are  not  intended  to  permit  the 
alteration  of  evidence  previously  pre¬ 
sented  during  any  administrative  or 
quasi-judicial  proceeding,  such  as  an 
employee  grievance  case.  Any  changes  in 
such  records  should  be  made  only 
through  the  established  procedures  for 
such  cases.  Further,  these  provisions  are 
not  designed  to  permit  collateral  attack 
upon  what  has  already  been  the  subject 
of  an  administrative  or  quasi-judicial 
action.  For  example,  an  individual  may 
not  use  this  procedure  to  challenge  the 
final  decision  on  a  grievance,  but  the  in¬ 
dividual  would  be  able  to  challenge  the 
fact  that  such  action  has  been  incorrect¬ 
ly  recorded  in  his  file. 

§  295c.7  Appeal  of  initial  adverse  agency 
determination  on  correction  or 
amendment. 

(a)  An  Individual  whose  request  for 
amendment  of  a  record  pertaining  to 


him  may  further  request  a  review  of  such 
determination  in  accordance  with  this 
section. 

(b)  Not  later  than  30  working  days 
following  receipt  of  notification  of  re¬ 
fusal  to  amend,  an  individual  may  file 
an  appeal  of  such  decision  with  the  Di¬ 
rector,  Defense  Mapping  Agency.  The 
appeal  shall  be  in  writing,  mailed  or 
delivered  to  Headquarters,  Defense  Map¬ 
ping  Agency,  Building  56,  U.S.  Naval 
Observatory,  Washington,  D.C.  20305. 
The  appeal  shall  identify  the  records  in¬ 
volved,  shall  indicate  the  dates  of  the 
request  and  adverse  determination  and 
shall  indicate  the  express  basis  for  that 
determination.  In  addition,  the  letter  of 
appeal  shall  state  briefly  and  succinctly 
the  reasons  why  the  adverse  determina¬ 
tion  should  be  reversed. 

(c)  Upon  appeal  from  a  denial  to 
amend  a  record  the  Director,  Defense 
Mapping  Agency  shall  make  a  deter¬ 
mination  whether  or  not  to  amend  the 
record  and  shall  notify  the  individual 
of  that  determination  by  certified  mail, 
return  receipt  requested,  not  later  than 
10  working  days  after  receipt  of  such 
appeal,  unless  extended  pursuant  to 
paragraph  (d)  of  this  section. 

(1)  The  Director  shall  also  notify  the 
Individual  of  the  provisions  of  the  Pri¬ 
vacy  Act  of  1974  (5  U.S.C.  552a(g)  (1A) 
regarding  judicial  review  of  his  deter¬ 
mination. 

(2)  If  on  appeal  the  refusal  to  amend 
the  record  is  upheld,  the  individual  shall 
be  permitted  to  file  a  statement  setting 
forth  the  reasons  for  his  disagreement 
with  the  Director’s  determination  and 
such  statement  shall  be  appended  to  the 
record  in  question. 

(d)  The  Director  may  extend  up  to 
30  days  the  time  period  prescribed  above 
within  which  to  make  a  determination 
on  an  appeal  from  refusal  to  amend  a 
record  for  the  reason  that  a  fair  and 
equitable  review  cannot  be  completed 
within  the  prescribed  time  period. 

§  295c. 8  Disclosure  of  record  to  person 
other  than  the  individual  to  whom  it 
pertains. 

(a)  Subject  to  the  conditions  herein¬ 
after  set  forth,  no  officer  or  employee 
of  the  DMA  will  disclose  any  record 
which  is  contained  in  a  system  of  rec¬ 
ords,  by  any  means  of  communication 
to  any  person  or  other  agency  who  is 
not  an  individual  to  whom  the  record 
pertains. 

(b)  Any  such  record  may  be  disclosed 
to  any  person  or  other  agency  only  upon 
written  request  or  with  prior  written 
consent  of  the  individual  to  whom  the 
record  pertains. 

(c)  In  the  absence  of  a  written  con¬ 
sent  from  the  individual  to  whom  the 
record  pertains,  such  record  may  be  dis¬ 
closed  only  provided  such  disclosure  is : 

(1)  To  those  officers  and  employees  of 
the  DoD  who  have  a  need  for  the  record 
in  the  performance  of  their  duties. 

(2)  Required  under  the  Freedom  of 
Information  Act. 

(3)  For  routine  use. 

(4)  To  the  Bureau  of  Census  for  pur¬ 
poses  of  planning  or  carrying  out  a  cen¬ 
sus  or  survey  or  related  activity  under  the 
provisions  of  Title  13  of  the  U.S.  Code. 
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(5)  To  a  recipient  who  has  provided 
the  DMA  with  adequate  advance  written 
assurance  that  the  record  will  be  used 
solely  as  a  statistical  research  or  report¬ 
ing  record  and  the  record  Is  transferred 
In  a  form  that  Is  not  individually  identi¬ 
fiable  and  will  not  be  used  to  make  any 
decisions  about  the  rights,  benefits  or  en¬ 
titlements  of  an  individual. 

(6)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has  suf¬ 
ficient  historical  or  other  value  to  war¬ 
rant  its  continued  preservation  by  the 
U.S.  Government  or  for  evaluation  by  the 
Administrator  of  the  General  Services 
Administration  or  his  designee  to  deter¬ 
mine  whether  the  record  has  such  value. 

( 7)  To  another  agency  or  to  an  instru¬ 
mentality  of  any  governmental  jurisdic¬ 
tion  within  or  under  the  control  of  the 
U.S.  for  a  civil  or  criminal  law  enforce¬ 
ment  activity  authorized  by  law,  provided 
the  head  of  the  agency  or  instrumental¬ 
ity  has  made  a  prior  written  request  to 
the  Director,  Defense  Mapping  Agency 
specifying  the  particular  record  and  the 
law  enforcement  activity  for  which  it  is 
sought. 

(8)  To  either  house  of  Congress,  and, 
to  the  extent  of  the  matter  within  its 
Jurisdiction,  any  committee  or  subcom¬ 
mittee  or  joint  committee  of  Congress. 

(9)  To  the  Comptroller  General  or  any 
of  his  authorized  representatives  in  the 
course  of  the  performance  of  the  duties 
of  the  GAO. 

(10)  Under  an  order  of  a  court  of  com¬ 
petent  jurisdiction. 

(d)  Except  for  disclosures  made  pur¬ 
suant  to  paragraphs  (c)  (1)  and  (2)  of 
this  section,  an  accurate  accounting  will 
be  kept  of  the  data,  nature  and  purpose 
of  each  disclosure  of  a  record  to  any  per¬ 
son  or  agency,  and  the  name  and  address 
of  the  person  or  agency  to  whom  the 
disclosure  was  made.  The  accounting  of 
disclosures  will  be  made  available  for  re¬ 
view  by  the  subject  of  a  record  at  his 
request  except  for  disclosures  made  pur¬ 
suant  to  paragraph  (c)  (7)  of  this  sec¬ 
tion.  If  an  accounting  of  disclosure  has 
been  made,  any  person  or  agency  con¬ 
tained  therein  will  be  informed  of  any 
correction  or  notation  of  dispute  made 
pursuant  to  §  295c. 6. 

§  295c-9  Fees. 

(a)  The  following  services  are  avail¬ 
able  with  respect  to  requests  made  un¬ 
der  the  provisions  of  this  Part  for  which 
fees  will  be  charged  as  provided  in  para¬ 
graphs  (b)  and  (c)  of  this  section. 

(1)  Copying  of  records/documents. 

(2)  Certification  of  copies  of  records/ 
documents. 

(b)  The  fees  set  forth  below  protide 
for  documents  to  be  mailed  with  ordi¬ 
nary  first-class  postage  prepaid.  If  a 
copy  is  to  be  transmitted,  at  the  indi¬ 
vidual’s  request,  by  registered,  certified, 
air  or  special  delivery  mail,  postage 
therefor  will  be  added  to  the  basic  fee. 
Also,  if  special  handling  or  packaging 
is  required,  costs  thereof  will  be  added 
to  the  basic  fee. 

(1)  Schedule  of  fees: 


General  fees: 

Minimum  fee,  per  request  plus _ $2. 00 

Forms,  per  copy _ .06 

Publication,  per  printed  page _ .01 

Microfiche,  per  flche _ .06 

Reports,  per  printed  page _  .06 


(Examples:  Cost  of  20  forms, 
$3.00;  cost  of  a  printed  pub¬ 
lication  with  100  pages,  $3.00; 
cost  of  a  microfiche  publi¬ 
cation  consisting  of  10  flche, 
$2.60). 

Office  copy  reproduction  (when  shelf 


stock  is  not  available) : 

Minimum  charge  up  to  six  repro¬ 
duced  pages _  2. 00 

Minimum  charge,  first  flche.. _  5.  00 

Each  additional  page _  .  06 

Each  additional  flche _  .  10 

Other  issuances: 

Minimum  charge  up  to  six  pages _ 2.  00 

Each  additional  page _  .  05 

Certification  and  validation  of  docu¬ 
ments  with  the  DMA  seal _  2. 00 


(2)  Rules  relating  to  charging  fees: 

(i)  Pees  may  be  charged  to  an  individ¬ 
ual  only  for  the  making  of  copies  when 
requested  by  the  individual.  When  copies 
are  made  by  the  DMA  as  a  necessary  In¬ 
cident  to  granting  access  to  a  record,  a 
fee  may  not  be  charged. 

(ii)  The  individual  may  not  be  charged 
for  time  spent  in  searching  for  requested 
records  or  for  time  spent  in  reviewing 
records  to  determine  if  they  fall  within 
the  disclosure  requirements  of  the  Act. 

(ill)  The  fee  charged  may  not  exceed 
the  direct  cost  of  making  the  copy. 

(3)  Certification  and  validation  with 
the  DMA  seal  of  documents  will  be  avail¬ 
able  at  $2.00  for  each  certification. 

(c)  Fees  charged  for  the  above  services 
are  payable  in  advance  by  check,  or 
money  order  payable  to  the  Treasurer  of 
the  United  States. 

§  293c.l0  Penalties. 

The  Privacy  Act  of  1974  (5  UJ3.C.  552a 
(1)  (3) )  makes  it  a  misdemeanor  subject 
to  a  maximum  fine  of  $5,000,  to  knowing¬ 
ly  and  willfully  request  or  obtain  any  rec¬ 
ord  concerning  an  individual  under  false 
pretenses.  The  Act  also  establishes  sim¬ 
ilar  penalties  for  violations  by  DMA  em¬ 
ployees  of  the  Act  or  regulations  estab¬ 
lished  thereunder. 

§  295c.  11  Specific  exemptions. 

(a)  The  Director  of  the  Defense  Map¬ 
ping  Agency  proposes  to  designate  the 
systems  of  records  described  in  para¬ 
graphs  (b)  through  (d)  of  this  section 
for  exemptions  under  the  specified  pro¬ 
visions  of  the  Privacy  Act  of  1974. 

(b)  ID — Manual. 

SYSNAME — 504-01  Personnel  Security 
Files. 

EXEMPTION — Parts  of  this  system  of  rec¬ 
ords  are  exempt  from  the  following  provi¬ 
sions  of  Title  6,  U.S.  Code,  section  552a:  (d), 
(e)  (1),  (e)  (4)  (G),  (e)  (4)  (H),  (e)  (4)  (I)  and 

<n. 

AUTHORITY— 5  U.S.C.  552a(k)(5). 

REASONS — This  system  of  records  Is  main¬ 
tained  solely  for  the  purpose  of  determining 
an  Individual’s  qualifications,  eligibility  or 
suitability  for  access  to  classified  Informa¬ 
tion.  Portions  of  It  are  considered  relevant 
and  necessary  to  making  Judicious  deter¬ 
minations  as  to  such  qualifications,  eligi¬ 
bility  or  suitability  and  could  only  be  ob¬ 
tained  by  providing  assurances  to  the  source 
that  his  or  her  Identity  would  not  be  revealed 
to  the  subject  of  the  record.  Disclosure  of 


all  or  part  of  the  record  with  the  identity  of 
the  souroe  removed  would  likely  reveal  the 
Identity  of  the  souroe,  eg.,  the  record  could 
contain  Information  which  could  only  have 
been  furnished  by  one  of  several  Individuals 
known  to  the  subject. 

(c)  ID — Manual 

SYSNAME — 504-01-3  Personnel  Security 
Investigative  Files. 

EXEMPTION — Parts  of  this  system  of  rec¬ 
ords  are  exempt  from  the  following  provi¬ 
sions  of  Title  5,  U.S.  Code,  section  552a:  (d), 
(e)  (1) ,  (e)  (4)  (G) ,  (e)  (4)  (H) .  (e)  (4)  (I)  and 
(U. 

AUTHORITY— 5  U.S.C.  552a(k)(5). 

REASONS— This  system  of  records  Is  main¬ 
tained  solely  for  the  purpose  of  determining 
an  Individual’s  qualifications,  eligibility  or 
suitability  for  access  to  classified  Informa¬ 
tion.  Portions  of  it  are  considered  relevant 
and  necessary  to  making  Judicious  deter¬ 
minations  as  to  such  qualifications,  eligibil¬ 
ity  or  suitability  and  could  only  be  obtained 
by  providing  assurances  to  the  source  that 
his  or  her  identity  would  not  be  revealed  to 
the  subject  of  the  record.  Disclosure  of  all 
or  part  of  the  record  with  the  Identity  of 
the  source  removed  would  likely  reveal  the 
identity  of  the  source,  eg„  the  record  could 
contain  information  which  could  only  have 
been  furnished  by  one  of  several  individuals 
known  to  the  subject. 

(d)  ID — Manual. 

SYSNAME — 504-02  Special  Security  Brief¬ 
ing  and  Debriefing  Flies. 

EXEMPTION— Parts  of  this  system  of 
records  are  exempt  from  the  following  pro¬ 
visions  of  Title  5,  Ufl.  Code,  section  652a: 
(d).  (e)(1),  (e)(4)(G),  (e)(4)(H),  (e)(4) 
(I)  and  (f). 

AUTHORITY— 6  U.S.C.  552a(k)(5). 

REASONS — This  system  of  records  Is  main¬ 
tained  solely  for  the  purpose  of  determining 
an  Individual’s  qualifications,  eligibility  or 
suitability  for  access  to  classified  Informa¬ 
tion.  Portions  of  It  are  considered  relevant 
and  necessary  to  making  Judicious  deter¬ 
minations  as  to  such  qualifications,  eligibil¬ 
ity  or  sultabUlty  and  could  only  be  obtained 
by  providing  assurances  to  the  source  that 
his  or  her  Identity  would  not  be  revealed 
to  the  subject  of  the  record.  Disclosure  of 
all  or  part  of  the  record  with  the  Identity  of 
the  sources  removed  would  likely  reveal  the 
identity  of  the  source,  eg.,  the  record  could 
contain  Information  which  could  only  have 
been  furnished  by  one  of  several  Individuals 
known  to  the  subject. 

(e)  In  addition,  all  systems  of  records 
maintained  by  the  DMA  shall  be  exempt 
from  the  requirements  of  5  U.S.C.  552a 

(d)  pursuant  to  5  U.S.C.  552a(k)  (1)  to 
the  extent  that  such  systems  contain  any 
information  properly  classified  under 
Executive  Order  11652,  3  CFR  339,  and 
which  is  required  by  the  said  Executive 
Order  to  be  kept  secret  in  the  interest  of 
national  defense  or  foreign  policy.  This 
exemption,  which  may  be  applicable  to 
parts  of  all  systems  of  records,  is  neces¬ 
sary  because  certain  record  systems  not 
otherwise  specifically  designated  for  ex¬ 
emptions  herein  may  contain  isolated 
Items  of  Information  which  have  been 
properly  classified. 

John  S.  Egbert, 

Brigadier  General,  USA, 
Acting  Director. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives  OASD  ( Comptroller ) . 

August  14,  1975. 

[FR  Doc.75-22207  Filed  8-25-75; 8: 45  am] 
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Defense  Nuclear  Agency 
[  32  CFR  Part  291a  ] 

PRIVACY  ACT  OF  1974 
Notice  of  Proposed  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (Pub.  L.  93-579;  88  Stat.  1896,  5 
U.S.C.  552a)  which  requires  each  Federal 
Agency  that  maintains  any  systems  of 
records  as  defined  in  the  statute  to  pro¬ 
mulgate  rules  pursuant  to  the  provisions 
of  the  Act. 

Notice  is  hereby  given  that  Director, 
DNA,  proposes  to  add  part  291a  to  im¬ 
plement  the  provisions  of  the  Privacy 
Act  of  1974  by  adoption  of  the  Depart¬ 
ment  of  Defense  Directive,  subject:  Per¬ 
sonal  Privacy  and  Rights  of  Individuals 
Regarding  Their  Personal  Records,  32 
CFR  Part  286a. 

Any  person  interested  in  the  rules  pro¬ 
posed  herein  may  participate  in  this 
proposed  rulemaking  by  submitting  either 
in  person  or  through  the  mail  written 
data,  views,  or  arguments  to  the  Chief, 
Civilian  Personnel  Division,  Personnel/ 
Administration  Directorate,  Defense  Nu¬ 
clear  Agency,  Washington,  D.C.  20305,  on 
or  before  17  September  1975. 

This  proposal  will  apply  to  other  pos¬ 
sible  systems  of  records  set  up  in  the 
future,  as  applicable. 

Therefore,  pursuant  to  5  U.S.C.  553, 
subsections  3  and  4  of  the  Administrative 
Procedure  Act,  and  to  the  Privacy  Act 
of  1974,  Title  32  of  the  Code  of  Federal 
Regulations  Part  291a  is  proposed  as  set 
forth  below : 

PART  291a— PRIVACY  ACT  OF  1974 

291a.  1  Purpose. 

291a.  2  Applicability. 

291a.  3  Definitions. 

291a.  4  Responsibilities. 

291a.  5  Reports. 

291a.  6  Specific  exemptions. 

§  291a. 1  Purpose. 

This  Instruction  implements  the  pro¬ 
visions  of  the  Privacy  Act  of  1974  and 
adopts  the  Department  of  Defense  Di¬ 
rective  32  CFR  Part  286a  as  to  policies, 
requirements,  and  procedures  to  be  used 
in  implementing  the  Act. 

§  291a. 2  Applicability. 

The  provisions  of  this  Instruction  ap¬ 
ply  to  Headquarters,  Defense  Nuclear 
Agency;  the  Armed  Forces  Radiobiology 
Research  Institute;  and  Field  Command, 
Defense  Nuclear  Agency. 

§  291a. 3  Definitions. 

(a)  As  used  in  32  CFR  Part  286a, 
Head  of  DoD  Component  is  the  Director, 
Defense  Nuclear  Agency. 

(b)  As  used  in  32  CFR  Part  286a,  Head 
of  DoD  Activity  or  Element  is  the  Com¬ 
mander,  Field  Command;  or  the  Director, 
Armed  Forces  Radiobiology  Research 
Institute. 

§  291a.4  Responsibilities. 

In  accordance  with  32  CFR  Part  286a, 
Director,  DNA,  designates  the  Chief, 
Civilian  Personnel  Division,  Personnel/ 
Administration  Directorate  as  Privacy 
Act  Officer  with  responsibility  for  serving 


as  the  principal  point  of  contact  on  pri¬ 
vacy  matters  and  for  establishing  and 
maintaining  an  effective  internal  Privacy 
Program  in  compliance  with  32  CFR  Part 
286a. 

§  29 la. 5  Reports. 

Reports  required  by  32  CFR  Part  286a 
will  be  submitted  to  Director,  DNA, 
ATTN:  PACV,  by  28  February  annually, 
for  consolidation  and  submission  to 
OASD(C) .  This  requirement  is  assigned 
Reports  Control  Symbol  DD(A)1379. 

§  291a. 6  Specific  exemptions. 

(a)  501-01  Personnel  Security  Files: 

(1)  Exemption.  This  system  of  records 
is  exempt  from  the  following  provisions 
of  title  5,  United  States  Code,  552a:  (c) 
(3),  (d),  (e)(4)(G),  (e)(4)(H),  (e)(4) 

(I) ,  and  (f ) . 

(2)  Authority.  5  U.S.C.  552a(k)  (5) . 

(3)  Reasons.  To  protect  the  identity  of 
a  source  who  furnished  information  to 
the  Government  under  an  express 
promise  that  the  identity  of  the  source 
would  be  held  in  confidence,  or,  prior  to 
27  September  1975,  under  an  implied 
promise  that  the  identity  of  the  source 
would  be  held  in  confidence. 

Note:  DNA  maintains  only  duplicate  files. 
All  requests  relative  to  this  system  of  records 
will  be  referred  to  the  investigative  agency 
conducting  the  investigation. 

Peter  H.  Haas, 

Deputy  Director  for 
Science  and  Technology. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives  OASD  ( Comptroller ) . 

August  14,  1975. 

(FR  Doc.75-22209  Filed  8-25-75;  8: 45  am] 

Defense  Supply  Agency 
[  32  CFR  Part  1286  ] 

[DSAR  5400.21;  RCS  DD( A)  1379] 

PERSONAL  PRIVACY  AND  RIGHTS  OF  IN¬ 
DIVIDUALS  REGARDING  THEIR  PER¬ 
SONAL  RECORDS 

Proposed  Privacy  Act  Regulations 

.  August  15,  1975. 

Pursuant  to  the  provisions  of  Public 
Law  93-579  enacted  31  December  1974, 
notice  is  hereby  given  of  the  proposed 
publication  of  DSA  Regulation  5400.21 
implementing  5  U.S.C.  552a,  The  Privacy 
Act  of  1974. 

Interested  parties  are  invited  to  sub¬ 
mit  written  comments,  suggestions,  or 
objections  regarding  the  proposed  regu¬ 
lation  to  Defense  Supply  Agency,  ATTN: 
DSAH-XA,  Cameron  Station,  Alexan¬ 
dria,  Virginia  22314,  by  September  19, 
1975. 

All  relevant  material  received  will  be 
considered.  All  written  comments  will  be 
available  for  public  inspection  during 
normal  business  hours  at  the  above 
address. 

Notice  is  given  that  it  1s  proposed  to 
make  this  regulation  effective  September 
27, 1975,  the  effective  date  of  section  3  of 
Pub.  L.  93-579. 


By  order  of  the  Director,  Defense  Sup¬ 
ply  Agency. 

J.  J.  McAleer,  Jr., 

Colonel,  USA, 

Staff  Director,  Administration. 

Part  1286,  Subchapter  B.  Chapter  XII 
of  Title  32  of  the  Code  of  Federal  Regu¬ 
lations  is  added  to  read  as  follows: 

PART  128— PERSONAL  PRIVACY  AND 
RIGHTS  OF  INDIVIDUALS  REGARDING 
THEIR  PERSONAL  RECORDS 

Sec. 

1286.1  Purpose  and  scope. 

1286.2  Policy. 

1286.3  Definitions. 

1286.4  Responsibilities. 

1286.5  Procedures. 

1286.6  Forms  and  reports. 

Authority:  Pub.  L.  93-579  (5  U.S.C.  552a). 

§  1286.1  Purpose  and  scope. 

(a)  .  This  Part  1286  implements  the 
Privacy  Act  of  1974  (hereinafter  referred 
to  as  the  Act)  by  prescribing: 

(1)  The  procedures  whereby  an  indi¬ 
vidual  can  be  notified  in  response  to  his 1 
request  of  any  system  of  records  named 
by  the  individual  contains  a  record  per¬ 
taining  to  him. 

(2)  The  requirements  for  verifying  the 
identity  of  an  individual  who  requests 
his  record  or  information  pertaining  to 
him  before  the  record  or  information  will 
be  made  available  to  him. 

( 3 )  The  procedures  for  granting  access 
to  an  individual  upon  his  request  of  his 
record  or  information  pertaining  to  him. 

(4)  The  procedures  for  reviewing  a  re¬ 
quest  from  an  individual  concerning  the 
amendment  of  any  record  or  information 
pertaining  to  him,  for  making  a  deter¬ 
mination  on  the  request,  and  for  an  ap¬ 
peal  of  an  initial  adverse  determination. 

(5)  The  procedures  and  policies  gov¬ 
erning  the  collection,  safeguarding, 
maintenance,  public  notice,  use,  and  dis¬ 
semination  of  personal  information. 

(6)  The  conditions  under  which  dis¬ 
closure  of  personal  information  may  be 
made  and  procedures  for  exempting  sys¬ 
tems  of  records  from  certain  require¬ 
ments  of  the  Act. 

(b)  This  Part  1286  is  applicable  to 
HQ  DSA  and  all  DSA  field  activities. 

§  1286.2  Policy. 

It  is  the  policy  of  DSA : 

(a)  To  preserve  the  personal  privacy 
of  individuals,  permitting  an  individual 
to  know  what  records  pertaining  to  him 
are  collected,  maintained,  used,  or  dis¬ 
seminated  in  DSA,  and  to  have  access  to 
and  have  a  comprehensible  copy  made 
of  all  or  any  portion  of  such  records  and 
to  correct  or  amend  such  records. 

(b)  To  collect,  maintain,  use,  or  dis¬ 
seminate  any  record  of  identifiable  per¬ 
sonal  information  in  a  manner  that  as¬ 
sures  that  such  action  is  for  a  necessary 
and  lawful  purpose;  that  the  informa- 

1  For  convenience  in  reading,  standard 
pronoun  gender  usage  will  be  followed  in  this 
DSAR.  Where  such  pronouns  as  "he”  or 
"him”,  etc.,  are  used,  it  should  be  under¬ 
stood  to  include  “she”  or  “hers”,  etc. 
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tlon  is  timely  and  accurate  for  its  in¬ 
tended  use;  and  that  adequate  safe¬ 
guards  are  provided  to  prevent  misuse 
of  such  information. 

§  1286.3  Definitions. 

(a)  Individual.  A  citizen  of  the  United 
States  or  an  alien  lawfully  admitted  for 
permanent  residence.  A  legal  guardian 
or  the  parent  of  a  minor  have  the  same 
rights  as  the  individual  and  may  act  on 
behalf  of  the  individual. 

<b)  Maintain.  (Records  on  individ¬ 
uals)  collect,  use,  or  disseminate. 

(c)  Record.  Any  item,  collection,  or 
grouping  of  information  about  an  in¬ 
dividual  that  is  maintained  by  an  agency, 
including,  but  not  limited  to,  his  educa¬ 
tion,  financial  transactions,  medical  his¬ 
tory,  and  criminal  or  employment  his¬ 
tory  and  that  contains  his  name,  or  the 
Identifying  number,  symbol,  or  other 
identifying  particular  assigned  to  the  in¬ 
dividual,  such  as  a  finger  or  voice  print 
or  a  photograph. 

(d)  Routine  Use.  The  disclosure  of  a 
record,  or  the  use  of  such  record  for  a 
purpose  which  is  compatible  with  the 
purpose  for  which  it  was  collected.  Rou¬ 
tine  use  encompasses  not  only  common 
or  ordinary  uses,  but  also  all  the  proper 
and  necessary  uses  of  the  record;  even 
if  such  use  occurs  infrequently. 

>(e)  System  Manager.  The  o facial  re¬ 
sponsible  for  the  policies  and  practices 
governing  the  system  of  records. 

(f )  System  of<Records.  A  group  of  rec¬ 
ords  under  the  control  of  any  system 
manager  from  which  information  is  re¬ 
trieved  by  the  name  of  an  individual  or 
by  some  identifying  number,  symbol,  or 
other  identifying  particular  assigned  to 
the  individual. 

§  1286.4  Responsibilities. 

(a)  HQ  DSA — (1)  The  Chief,  Admin¬ 
istrative  Management  Division,  Office  of 
Administration  ( DSAH-XA )  will: 

(1)  Formulate  policy  to  provide  com¬ 
prehensive  guidance  necessary  for  uni¬ 
form  compliance  with  the  Act  by  all  ele¬ 
ments  of  DSA. 

(ii)  Serve  as  the  focal  point  on  pri¬ 
vacy  matters  for  DSA  in  communication 
with  the  Defense  Privacy  Board  and  is 
designated  the  DSA  Privacy  Act  Officer. 

(ill)  Supervise  the  preparation  for 
publication  in  the  Federal  Register  of  all 
required  information  or  systems  of  rec¬ 
ords  affected  by  the  Act. 

(iv)  Serve  as  the  DSA  representative 
on  the  Defense  Privacy  Board. 

(v)  Review  for  conformity  with  the 
Act,  all  procedures,  including  DSA  and 
DD  forms,  which  requires  an  individual 
to  furnish  information,  and  formulate 
corrective  or  supplementary  provisions, 
as  necessary. 

(vi)  Maintain  this  DSAR  in  a  current 
status  and  review  it  annually. 

(2)  The  Chief,  Publication  Division, 
Office  of  Administration  ( DSAH-XM ) 
will  review  DSA  publications  to  assure 
that  those  which  meet  the  criteria  for 
publication  in  the  Federal  Register  are 
prepared  in  proper  form  and  transmitted 
promptly  for  publication  in  the  Federal 
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Publication  of  Material  in  the  Federal 
Register. 

(3)  The  Counsel  ( DSAH-G )  will  re¬ 
view  policies,  practices,  and  procedures  to 
ensure  conformity  with  the  Act. 

(4)  The  Assistant  Director,  Plans,  Pro¬ 
grams  and  Systems  ( DSAH-LS )  will  pro¬ 
vide  policies  and  guidance  to  preclude 
unauthorized  disclosure  of  protective  in¬ 
formation  maintained  in  the  automatic 
data  processing  facility. 

(5)  The  Chief,  Training  and  Incentives 
Division,  Office  of  Civilian  Personnel 
( DSAH-KT )  will,  in  conjunction  with 
the  DSA  Privacy  Board,  ensure  develop¬ 
ment  of  appropriate  training  program 
for  all  personnel  where  duties  involve 
responsibilities  for  systems  of  records 
affected  by  the  Act. 

(6)  The  Heads  of  HQ  DSA  Principal 
Staff  Elements  ( PSEs )  will: 

(i)  Ensure  that  the  collection,  mainte¬ 
nance,  use,  or  dissemination  of  record  of 
identifiable  personal  information  is  in  a 
manner  that  assures  that  such  action  is 
for  a  necessary  and  lawful  purpose,  that 
the  information  is  timely  and  accurate 
for  its  intended  use,  and  that  adequate 
safeguards  are  provided  to  prevent  mis¬ 
use  of  such  information. 

(ii)  Ensure  that  internal  operating 
procedures  provide  for  effective  compli¬ 
ance  with  the  Act. 

(iii)  Establish  procedures  for  the 
granting  of  confidentiality  in  regulations 
and  procedures  for  investigations  (e.g., 
law  enforcement,  suitability,  etc.). 

(iv)  Prepare  and  submit  reports  in  ac¬ 
cordance  with  §  1286.6. 

(7)  DSA  Privacy  Board.  Established 
under  the  chairmanship  of  the  Chief, 
Administrative  Management  Division, 
Office  of  Administration  (DSAH-XA) 
with  membership  consisting  of  repre¬ 
sentatives  from  the  Comptroller,  DSA, 
Counsel,  DSA,  Staff  Director,  Civilian 
Personnel,  DSA,  Assistant  Director, 
Plans,  Programs,  and  Systems,  DSA, 
Staff  Director,  Military  Personnel,  DSA, 
Command  Security  Officer,  DSA,  and  the 
Executive  Director,  Industrial  Security, 
HQ  DSA  CAS.  The  Board  will  cause  to 
be  reviewed  for  conformity  with  the  Act, 
each  category  of  information  in  a  system 
of  records  for  necessity  and  relevance; 
provide  assistance  in  the  development  of 
DSA- wide  Privacy  training  program;  and 
review  practices  and  procedures  estab¬ 
lished  by  system  managers  to  ensure  they 
are  in  conformity  with  the  Act. 

(b)  The  Heads  of  DSA  Primary  Level 
Field  Activities  ( PLFAs )  will: 

(1)  Ensure  that  the  collection,  main¬ 
tenance,  use,  or  dissemination  of  record 
of  identifiable  personal  information  is  in 
a  manner  that  assures  that  such  action  is 
for  a  necessary  and  lawful  purpose,  that 
the  information  is  timely  and  accurate 
for  its  intended  use,  and  that  adequate 
safeguards  are  provided  to  prevent  mis¬ 
use  of  such  information. 

(2)  Designate  a  Privacy  Act  officer  to 
serve  as  the  principal  point  of  contact  on 
privacy  matters. 

„  (3)  Ensure  that  internal  operating  pro¬ 
cedures  provide  for  effective  compliance 
with  the  Act.  \ 


(4)  Establish  a  training  program  for 
those  personnel  whose  duties  involve  re¬ 
sponsibilities  for  systems  of  records  af¬ 
fected  by  the  Act. 

§  1286.5  Procedures. 

(a)  Access  to  personal  inf  or  mation.  (1) 
Upon  request,  an  individual  will  be  in¬ 
formed  whether  or  not  a  system  of  rec¬ 
ords  contains  a  record  pertaining  to  him, 
and  accompanied  by  a  person  of  his  own 
choosing,  if  he  so  desires,  will  be  per¬ 
mitted  to  review  his  records,  and  to  ob¬ 
tain  a  copy  of  such  records  in  a  form  that 
is  comprehensible  to  him  at  a  reasonable 
cost,  unless  exempted  in  accordance  with 
paragraph  (o)(l)(v)  of  this  section  or 
paragraph  (d)  of  this  section.  This  Part 
1286  does  not  require  that  a  record  be 
created  or  that  an  individual  be  given 
access  to  records  which  are  not  retrieved 
by  name  or  other  individual  identifier. 
Only  costs  of  reproduction,  as  set  forth 
in  DSAR  5400.14,  Availability  to  the  Pub¬ 
lic  of  Official  Information,  may  be 
charged;  however,  if  copying  is  the  only 
means  whereby  the  record  can  be  made 
available  to  the  individual,  reproduction 
fees  will  not  be  assessed  (i.e.,  when  a  copy 
must  be  made  in  order  to  delete  informa¬ 
tion  contained  on  the  record  pertaining 
to  another  individual) . 

(i)  The  granting  of  access  to  a  record 
containing  personal  information  will  not 
be  conditioned  upon  any  requirement  by 
the  individual  to  state  a  reason  or  other¬ 
wise  justify  the  need  to  gain  access. 

(ii)  Prior  to  granting  access  to  per¬ 
sonal  information,  individuals  may  be 
required  to  provide  reasonable 'verifica¬ 
tion  of  his  identity. 

(a)  No  verification  of  identity  will  be 
required  of  an  individual  seeking  access 
to  records  which  are  otherwise  available 
to  any  member  of  the  public  under  DSAR 
5400.14. 

(b)  For  the  individual  who  seeks  ac¬ 
cess  in  person,  verification  of  Identity 
will  normally  be  made  by  those  docu¬ 
ments  which  an  individual  is  likely  to 
have  readily  available,  such  as  employee 
or  military  identification  card,  driver’s 
license,  or  medical  card. 

(c)  When  access  is  requested  by  mail, 
verification  of  identity  may  consist  of  the 
individual  providing  certain  minimum 
identifying  data,  such  as  name  and  date 
of  birth  or  such  other  information 
deemed  necessary  by  the  system  manager 
having  custody  of  the  record.  If  the  sen¬ 
sitivity  of  the  data  warrants,  a  signed 
notarized  statement  of  identity  may  be 
required. 

(d)  An  individual  will  not  be  denied 
access  to  his  record  for  refusing  to  dis¬ 
close  his  social  security  number  (SSN), 
unless  disclosure  of  his  SSN  is  required 
by  Federal  Statute  or  required  for  verifi¬ 
cation  purposes  under  a  system  of  rec¬ 
ords  existing  and  operating  before  1  Jan¬ 
uary  1975,  if  such  disclosure  was  required 
under  statute  or  regulation  adopted  prior 
to  such  a  date. 

(e)  Individuals  may  not  be  denied  ac¬ 
cess  to  a  record  pertaining  to  themselves 
because  those  records  are  exempted  from 
disclosure  under  the  provisions  of  DSAR 
5400.14. 
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(ill)  Access  to  a  record  or  a  copy 
thereof  will  not  be  denied  solely  because 
the  record’s  physical  presence  is  not 
readily  available  (i.e.,  on  magnetic 
tape) ,  or  because  the  context  of  the  rec-> 
ord  may  disclose  sensitive  information 
about  another  individual.  To  protect  the 
personal  privacy  of  other  individuals  who 
may  be  identified  in  a  record,  an  extract 
will  be  prepared  to  delete  only  that  in¬ 
formation  which  would  not  be  releasible 
to  the  requesting  individual  under  DSAR 
5400.14. 

(iv)  A  medical  record  will  be  disclosed 
to  the  individual  to  whom  it  pertains  un¬ 
less,  in  the  judgment  of  a  physician,  ac¬ 
cess  to  such  record  could  have  an  adverse 
effect  upon  the  individual’s  physical  or 
mental  health.  When  it  has  been  deter¬ 
mined  that  the  disclosure  of  medical  in¬ 
formation  could  have  an  adverse  effect 
upon  the  individual  to  whom  it  pertains, 
the  information  may  be  transmitted  to  a 
physician  named  by  the  requesting 
individual. 

(v)  This  Part  1286  does  not  entitle  an 
individual  to  have  access  to  any  informa¬ 
tion  compiled  in  reasonable  anticipation 
of  a  civil  action  or  proceeding. 

(vi)  A  system  manager  may  require 
an  individual  who  wishes  to  be  accom¬ 
panied  by  another  person  when  receiving 
access  to  his  records  to  furnish  a  written 
statement  authorizing  discussion  of  the 
records  in  the  presence  of  the  accom¬ 
panying  person. 

(vii)  Any  requests  from  an  individual 
for  access  to  or  copies  of  records  main¬ 
tained  on  him  will  be  processed  in  ac¬ 
cordance  with  this  Part  1286  and  not  the 
Freedom  of  Information  Act.  Normally, 
requests  for  access  to  records  will  be 
acknowledged  within  10  working  days  of 
receipt  and  access  provided  within  30 
working  days. 

(viii)  Copies  of  investigatory  records 
compiled  by  any  investigative  organiza¬ 
tion,  but  in  the  temporary  custody  of  an 
element  requesting  the  record  for  pur¬ 
poses  of  adjudication  or  other  personnel 
action,  are  the  records  of  the  originat¬ 
ing  investigative  organization.  Indi¬ 
viduals  seeking  access  to  such  records 
will  be  directed  to  the  originating  inves¬ 
tigative  organization  and  should  be  in¬ 
structed  to  direct  all  requests  submitted 
under  the  Act  to  that  organization.  Rec¬ 
ords  concerning  the  adjudication,  or 
other  personnel  actions  based  on  the  in¬ 
vestigative  records,  originated  by  the 
organization  using  the  investigation,  are 
the  records  of  the  using  organization 
which  shall  respond  to  all  other  requests 
under  the  Act  concerning  them. 

(2)  Amendment  of  personal  informa¬ 
tion.  (i)  An  individual  will  be  given  the 
opportunity  to  request,  either  in  person 
or  through  the  mail,  that  his  record  be 
amended.  The  system  manager  may, 
however,  require  that  such  requests  be 
made  in  writing.  Instructions  for  the 
preparation  of  a  request  and  any  forms 
employed  should  be  as  brief  and  as  sim¬ 
ple  as  possible.  Requests  should  contain 
as  a.  minimum,  identifying  information 
to  locate  the  record,  a  description  of  the 
items  to  be  amended  and  the  reason 
amendment  is  being  requested.  A  request 


will  not  be  rejected  or  required  to  be  re¬ 
submitted  unless  additional  information 
is  essential  to  process  the  request.  In¬ 
complete  or  inaccurate  requests  will  not 
be  rejected  categorically;  the  individual 
will  be  asked  to  clarify  the  request  as 
needed.  Individuals  will  be  required  to 
provide  verification  of  identity  as  para¬ 
graph  (a)  (1)  (ii)  of  this  section  to  as¬ 
sure  that  the  requester  is  seeking  to 
amend  records  pertaining  to  him  and 
not,  inadvertently  or  intentionally,  the 
records  of  another  individual. 

(ii)  A  written  acknowledgement  of  the 
receipt  of  a  request  for  amendment  of  a 
record  must  be  provided  to  the  individual 
within  10  working  days  (excluding  Sat¬ 
urdays,  Sundays,  and  legal  public  holi¬ 
days)  after  receipt  by  the  system  man¬ 
agers.  The  acknowledgement  will  clearly 
identify  the  request  and  advise  the  in¬ 
dividual  when  he  may  expect  to  be  ad¬ 
vised  of  action  taken  on  the  request. 
Whenever  practicable,  the  decision  will 
be  made  within  30  working  days.  No  sep¬ 
arate  acknowledgement  of  receipt  is  nec¬ 
essary  if  the  request  can  be  either  ap¬ 
proved  or  denied,  and  the  individual  ad¬ 
vised  within  the  10-day  period.  For  re¬ 
quests  presented  in  person,  written  ac¬ 
knowledgement  should  be  provided  at  the 
time  the  request  is  presented. 

(iii)  If  the  system  manager  agrees  with 
any  portion  or  all  or  the  individual’s  re¬ 
quest  to  amend  a  record,  the  system  man¬ 
ager  will  promptly  advise  the  individual 
and  amend  the  record  accordingly.  If  dis¬ 
closure  accounting  has  been  made,  the 
system  manager  will  advise  all  previous 
recipients  of  tire  record  that  the  amend¬ 
ment  has  been  made  and  the  substance 
of  the  correction. 

(iv)  If  the  system  manager  disagrees 
with  all  or  any  portion  of  a  request  to 
amend  a  record,  the  system  manager 
will  promptly: 

(a)  Advise  the  individual  of  his  refusal 
and  the  reasons  therefor. 

(b)  Inform  the  individual  that  he  may 
request  a  further  review  by  the  desig¬ 
nated  reviewing  official. 

(c)  Describe  the  procedures  for  re¬ 
questing  such  a  review  including  the 
name  and  address  of  the  official  to  whom 
the  request  should  be  directed. 

(v)  A  review  of  the  initial  refusal  to 
amend  a  record  will  be  made  if  requested 
by  the  individual. 

(a)  Heads  of  HQ  DSA  PSEs  and  Heads 
of  PLFAs,  as  applicable,  are  designated 
reviewing  officials  and  will  make  a  review 
of  the  initial  determination.  The  Deputy 
Director,  DSA,  or  the  Deputy  Director, 
CAS,  for  HQ  DSA  CAS  elements  and  De¬ 
fense  Contract  Administration  Services 
Regions,  will  be  the  reviewing  official 
when  one  of  the  aforementioned  officials 
is  identified  as  a  system  manager. 

(b)  If,  after  conducting  the  review,  the 
reviewing  official  also  refuses  to  amend 
the  record  in  accordance  with  the  indi¬ 
vidual’s  request,  the  individual  will  be 
notified : 

(1)  Of  the  refusal  and  the  reasons 
therefor. 

(2)  Of  his  right  to  file  a  concise  state¬ 
ment  of  reasons  for  disagreeing  with  the 
decision  of  DflA. 
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(3)  Of  the  procedures  for  filing  a  state¬ 
ment  of  disagreement  and  such  state¬ 
ment  will  be  made  available  to  anyone 
to  whom  the  record  is  subsequently  dis¬ 
closed. 

(4)  That  prior  recipients  of  the  dis¬ 
puted  record  will  be  provided  a  copy  of 
the  statement  of  disagreement  to  the  ex¬ 
tent  that  an  accounting  of  disclosure  is 
maintained. 

(5)  Of  his  right  to  seek  judicial  review 
of  DSA’s  refusal  to  amend  a  record. 

(c)  If  the  reviewing  official  determines 
that  the  record  should  be  amended  in  ac¬ 
cordance  with  the  request,  the  system 
manager  will  amend  the  record,  advise 
the  individual,  and  inform  previous 
recipients  where  an  accounting  of  disclo¬ 
sure  has  been  maintained. 

id)  A  final  determination  on  the  in¬ 
dividual’s  request  for  a  review  of  an  ini¬ 
tial  refusal  to  amend  a  record  must  be 
completed  within  30  days  after  receipt 
by  the  proper  office  unless  the  reviewing 
official  determines  that  a  fair  and  equi¬ 
table  review  cannot  be  completed  in  that 
time.  If  additional  time  is  required,  the 
individual  will  be  informed,  in  writing,  of 
the  reasons  for  the  delay  and  of  the  ap¬ 
proximate  date  on  which  the  review  is  ex¬ 
pected  to  be  completed. 

(vi)  When  an  individual  files  a  state¬ 
ment  of  disagreement,  the  system 
manager  will  clearly  annotate  the  record 
so  that  the  dispute  is  apparent  to  any¬ 
one  who  may  subsequently  grant  access 
to  use  or  disclose  the  record.  The  nota¬ 
tion  itself  will  be  integral  to  the  record. 
Where  an  accounting  of  disclosure  has 
been  made,  the  system  manager  will  ad¬ 
vise  previous  recipients  that  the  record 
has  been  disputed  and  will  provide  a  copy 
of  the  individual’s  statement. 

(a)  The  individual’s  statement  of  dis¬ 
agreement  need  not  be  filed  as  an  inte¬ 
gral  part  of  the  record  to  which  it  per¬ 
tains.  It  will,  however,  be  maintained  in 
such  a  manner  as  to  permit  ready  re¬ 
trieval  whenever  the  disputed  portion  of 
the  record  is  to  be  disclosed.  When  infor¬ 
mation  which  is  the  subject  of  a  state¬ 
ment  of  disagreement,  is  subsequently 
disclosed,  the  system  manager  will  note 
which  information  is  disputed  and  pro¬ 
vide  a  copy  of  the  individual’s  state¬ 
ment. 

(b)  The  system  manager  may  include 
a  brief  summary  of  its  reasons  for  not 
making  an  amendment  when  disclosing 
disputed  information.  Summaries  nor¬ 
mally  will  be  limited  to  the  reasons  stated 
to  the  individual.  The  system  manager’s 
summary  will  be  treated  as  part  of  the 
individual’s  record;  however,  it  will  not 
be  subject  to  the  amendment  procedures. 

(b)  Disclosure  to  others.  (1)  Except  as 
prescribed  in  paragraph  (a)  of  this  sec¬ 
tion,  this  Part  1286  does  not  require  dis¬ 
closure  of  records  to  anyone  other  than 
the  individual  to  whom  the  records  per¬ 
tain. 

(2)  No  record  contained  in  a  system  of 
records  maintained  within  DSA  will  be 
disclosed  by  any  means  of  communica¬ 
tion  to  any  person,  or  to  any  agency  out¬ 
side  DSA,  except  pursuant  to  a  written 
request  by,  or  with  the  prior  written  con¬ 
sent  of,  the  individual  to  whom  the 
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record  pertains,  unless  disclosure  of  the 
record  would  be: 

(i)  To  those  officials  and  employees  of 
the  Department  of  Defense  who  have  a 
need  for  the  record  in  the  performance 
of  their  official  duties  and  the  use  is  com¬ 
patible  with  the  purpose  for  which  the 
record  is  maintained.  This  includes,  for 
example,  transfer  of  information  between 
components  when  civilians  or  military 
personnel  assigned  or  affiliated  with  one 
component  are  processed  by  an  activity 
of  another  component  such  as  Armed 
Forces  Examination  and  Entrance  Sta¬ 
tions  (AFEES),  Air  Terminals,  or  De¬ 
fense  Investigative  Service  (DIS). 

(ii)  Required  to  be  disclosed  to  a  mem¬ 
ber  of  the  public  by  DSAR  5400.14.  Some 
examples  of  personal  information  per¬ 
taining  to  military  personnel  which  nor¬ 
mally  are  released  without  an  unwar¬ 
ranted  invasion  of  privacy  are:  name, 
rank,  date  of  rank,  salary,  present  and 
past  duty  assignments,  future  assign¬ 
ments  which  have  been  finalized,  office 
phone  number,  source  of  commission, 
military  and  civilian  educational  level, 
and  promotion  sequence  number.  Dis¬ 
closure  of  personal  information  pertain¬ 
ing  to  civilian  employees  shall  be  made  in 
accordance  with  the  Federal  Personnel 
Manual. 

(iii)  For  a  routine  use  as  defined  in 
§  1286.3  and  described  in  section  II  H  of 
Appendix  A. 

(iv)  To  the  Bureau  of  the  Census  for 
purpose  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity  au¬ 
thorized  by  law. 

(v)  To  a  recipient  who  has  provided 
DSA  with  advance  adequate  written  as¬ 
surance  that: 

(a)  The  record  will  be  used  solely  as  a 
statistical  research  or  reporting  record. 

(b)  The  record  is  to  be  transferred  in 
a  form  that  is  not  individually  identifi¬ 
able,  (i.e.,  the  identity  of  the  individual 
cannot  be  determined  by  combining  vari¬ 
ous  statistical  records) . 

(c)  The  record  will  not  be  used  to 
make  any  decisions  about  the  rights, 
benefits,  or  entitlements  of  an  individual. 

<vi)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has  suf¬ 
ficient  historical  or  other  value  to  war¬ 
rant  its  continued  preservation  by  the 
United  States  Government,  or  for  evalu¬ 
ation  by  the  Administrator  of  General 
Services  or  his  designee  to  determine 
whether  the  record  has  such  value.  A  rec¬ 
ord  transferred  to  a  Federal  records  cen¬ 
ter  for  safekeeping  or  storage  does  not 
fall  within  this  category  since  Federal 
records  center  personnel  act  on  behalf  of 
DSA  in  this  instance  and  the  records  re¬ 
main  under  the  control  of  DSA.  No  dis¬ 
closure  accounting  record  of  the  transfer 
of  records  to  Federal  records  centers  need 
be  maintained. 

(vii)  To  another  agency  or  to  an  in¬ 
strumentality  of  any  governmental  Jur¬ 
isdiction  within  or  under  the  control  of 
the  United  States  for  a  civil  or  criminal 
law  enforcement  activity  if  the  activity  is 
authorized  by  law,  and  if  the  Head  of  the 
agency  or  instrumentality  has  made  a 
written  request  to  a  DSA  element  which 
maintains  the  record  specifying  the  par¬ 


ticular  portion  desired  and  the  law  en¬ 
forcement  activity  for  which  the  record 
is  sought.  Blanket  requests  for  all  rec¬ 
ords  pertaining  to  an  Individual  will  not 
be  accepted.  A  record  may  also  be  dis¬ 
closed  to  a  law  enforcement  agency  at 
the  initiative  of  a  DSA  element  which 
maintains  the  record  when  criminal  con¬ 
duct  is  suspected,  provided  that  such  dis¬ 
closure  has  been  established  in  advance 
as  a  “routine  use”. 

(viii)  To  a  person  pursuant  to  a  show¬ 
ing  of  compelling  circumstances  affecting 
the  health  or  safety  of  an  individual  if 
upon  such  disclosure  notification  is 
transmitted  to  the  last  known  address  of 
the  individual  to  whom  the  record  per¬ 
tains. 

(ix)  To  either  House  of  Congress,  or, 
to  the  extent  of  matter  within  its  juris¬ 
diction,  any  committee  or  subcommittee 
thereof,  or  any  joint  committee.  This 
does  not  authorize  the  disclosure  of  any 
record  subject  to  this  Part  1286  to  mem¬ 
bers  of  Congress  acting  in  their  individ¬ 
ual  capacities  or  on  behalf  of  their  con¬ 
stituents. 

(x)  To  the  Comptroller  General,  or  any 
of  his  authorized  representatives,  in  the 
course  of  the  performance  of  the  duties 
of  the  General  Accounting  Office. 

(xi)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction. 

(a)  When  a  record  is  disclosed  under 
compulsory  legal  process  and  when  the 
issuance  of  that  order  or  subpoena  is 
made  public  by  the  court  which  issued  it, 
reasonable  efforts  will  be  made  to  notify 
the  individual  to  whom  the  record  per¬ 
tains.  This  may  be  accomplished  by  noti¬ 
fying  the  individual  by  mail  at  his  most 
recent  address  as  contained  in  DSA  rec¬ 
ords. 

( b)  Upon  being  served  with  an  order  to 
disclose  a  record,  the  system  manager  will 
endeavor  to  determine  whether  the  is¬ 
suance  of  the  order  is  a  matter  of  public 
record  and,  if  it  is  not,  seek  to  be  advised 
when  it  becomes  public.  An  accounting 
of  the  disclosure  will  be  made  at  the  time 
the  system  manager  complies  with  the 
order  or  subpoena. 

(3)  Each  system  manager,  with  respect 
to  each  system  of  records  under  his  con¬ 
trol  will: 

(i)  For  all  disclosures  under  paragraph 
(b)  (2)  of  this  section,  except  those  un¬ 
der  paragraphs  (b)  (2)  (i)  and  (ii)  of 
this  section,  keep  an  accurate  accounting 
of  the  following: 

(a)  The  date  of  the  disclosure. 

(b)  The  nature  of  the  disclosure;  that 
is  what  was  disclosed  and  how;  for  ex¬ 
ample,  oral  disclosure  by  telephone  of 
home  address.  Other  examples  of  dis¬ 
closure  include  visual  review  of  the  rec¬ 
ord,  written,  transfer  of  data  through 
telecommunications  network,  etc. 

(c)  The  purpose  of  the  disclosure.  De¬ 
scribe  the  condition  of  the  disclosure  as 
listed  in  paragraphs  (b)  (2)  (iii)  thru 
(xi)  of  this  section.  If  disclosure  is  for 
a  routine  use  published  in  a  records 
systems  notice,  briefly  describe  the  spe¬ 
cific  routine  use. 

(d)  The  name  and  address  of  the  per¬ 
son  or  agency  to  whom  the  disclosure  is 
made.  A  system  manager  need  not  make 


a  notation  on  a  single  document  of 
every  particular  record,  provided  he  can 
construct  from  the  system  for  the  re¬ 
quired  accounting  information. 

(ii)  Retain  the  accounting  made  under 
paragraph  (b)  (3)  (i)  of  this  section  for 
at  least  5  years  after  the  last  disclosure 
or  the  life  of  the  record,  whichever  is 
longer.  No  record  of  the  disclosure  of 
this  accounting  need  be  maintained. 

(iii)  Upon  request  of  the  individual 
to  whom  the  record  pertains,  make 
available  to  that  individual  all  infor¬ 
mation  in  the  accounting  of  disclosures 
except  that  pertaining  to  disclosures  for 
law  enforcement  purposes  pursuant  to 
paragraph  (b)(2)  (vii)  of  this  section, 
and  systems  that  have  been  determined 
to  be  exempt  from  these  provisions 
under  subsections  (j)  and  (k)  of  the 
Act. 

(4)  Names  and  Addresses.  An  indi¬ 
vidual’s  name  and  address  may  not  be 
sold  or  rented  by  DSA  unless  such  action 
is  specifically  authorized  by  law.  Requests 
for  home  addresses  may  be  referred  to 
the  last  known  address  of  the  individual 
for  reply  at  his  discretion  and  the  re¬ 
quester  will  be  notified  accordingly.  This 
provision  will  not  be  construed  to  require 
the  withholding  of  names  and  addresses 
otherwise  permitted  to  be  made  public. 

(c)  Collection  of  personal  information 
from  individuals.  (1)  Collection  Direct¬ 
ly  from  Individuals.  Personal  informa¬ 
tion  shall  be  collected  to  the  greatest  ex¬ 
tent  practicable  directly  from  the  indi¬ 
vidual  when  the  information  may  result 
in  adverse  determinations  about  an  in¬ 
dividual’s  rights,  benefits,  and  privileges 
under  Federal  programs.  The  collection 
of  information  from  third  parties  should 
be  minimized.  Exceptions  to  this  policy 
may  be  made  under  certain  circum¬ 
stances,  such  as  the  following: 

(1)  There  is  need  to  ensure  accuracy 
of  information  supplied  by  an  individ¬ 
ual  by  verifying  with  a  third  party,  such 
as  in  the  case  of  verifying  information 
for  a  security  clearance. 

(ii)  The  nature  of  the  information  is 
such  that  it  can  only  be  obtained  from 
a  third  party,  such  as  an  evaluation  of 
employee’s  performance  in  a  previous 
job  or  assignment. 

(iii)  Obtaining  the  information  from 
the  individual  would  present  exceptional 
practical  difficulties  or  would  result  in 
unreasonable  costs. 

(2)  Informing  Individuals  From  Whom 
Information  is  Requested.  Each  individ¬ 
ual  who  is  asked  to  supply  personal  in¬ 
formation  must  be  told  of: 

(i)  The  authority  (statute  or  Execu¬ 
tive  Order)  which  authorizes  its 
solicitation. 

(ii)  The  principal  purpose  or  purpose 
for  which  it  is  to  be  used. 

(iii)  The  routine  uses,  to  be  made  of 
It. 

(iv)  Whether  furnishing  such  infor¬ 
mation  is  mandatory  or  voluntary  and 
the  effects  on  him,  if  any,  of  not  pro¬ 
viding  it.  This  notice  to  the  individual 
will  be  made  on  a  separate  form  which 
can  be  retained  by  the  individual.  This 
advice  must  be  given  on  all  media  used 
in  requesting  information  whether  it  is 
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a  “form”  in  the  usual  sense  (i.e.,  a  pre¬ 
printed  document  with  a  control  number 
and  an  edition  date)  or  a  format,  ques¬ 
tionnaire,  survey  sheet,  or  report  ren¬ 
dered  on  a  blank  sheet.  Supplying  per¬ 
sonal  information  is  when  individuals 
personally  complete  the  fill-in  informa¬ 
tion  about  themselves  on  the  form  or 
when  the  individuals  furnish  the  infor¬ 
mation  about  themselves  verbally  as  in 
an  interview  or  question  and  answer  type 
of  arrangement. 

(3)  Collection  Documents  in  Use  Prior 
to  27  Sep  75.  These  documents  in  use 
before  27  Sep  75  and  which  are  to  be 
used  on  and  after  that  date,  must  meet 
the  notice  requirements  by  use  of  a  sepa¬ 
rate  statement  to  go  along  with  each 
such  document  subject  to  the  provisions 
of  the  Act.  The  statement  will  be  as¬ 
signed  the  identifying  form  number/ 
RCS/OMB  Appeal  Number  /Form  Letter 
Number  used  in  collecting  the  informa¬ 
tion  and  the  suffix  “Privacy  Act  State¬ 
ment”,  as  follows: 

(i)  For  forms  in  regularly-issued, 
numbered  series,  the  Privacy  Act  State¬ 
ment  will  bear  the  same  number  and  edi¬ 
tion  date  as  the  form  to  which  it  per¬ 
tains,  except  as  provided  in  paragraph  2 
of  Appendix  B.  Example:  For  DD  Form 
3,98,  Statement  of  Personal  History,  the 
applicable  notice  to  each  individual 
asked  to  complete  the  form  will  be  iden¬ 
tified  as  “DD  Form  398 — Privacy  Act 
Statement”  in  the  lower  left-hand 
corner. 

(ii)  For  unnumbered  formats,  ques¬ 
tionnaires,  surveys,  and  reports  which 
are  not  in  the  regularly-issued  form 
number  series,  the  Privacy  Act  State¬ 
ment  will  bear  the  report  control  symbol 
or  OMB  Approval  Number  under  the  au¬ 
thority  for  which  the  information  is  col¬ 
lected,  if  applicable. 

Example:  For  the  Air  Force  Junior  ROTC 
Survey  for  AFJRDTC  Cadets  (Format  A) ,  the 
applicable  notice  to  each  individual  asked  to 
complete  the  questionnaire  will  be  identified 
as  “OMB  Approval  No.  21-R0268 — Privacy 
Act  Statement”.  Same  reports  are  assigned 
Reports  Control  Symbol  (RCS)  numbers  or 
OMB  Approval  Numbers.  If  these  reports  are 
controlled  in  a  regular  numbered  form  se¬ 
ries,  then  the  Privacy  Act  Statement  will  bear 
the  form  number  reference  in  lieu  of  the 
RCS  or  OMB  Number. 

(4)  Preparation  of  Privacy  Act  state¬ 
ments.  (i)  The  proponent  (i.e.,  the  ini¬ 
tiator)  has  the  final  responsibility  for 
determining  whether  a  form,  format, 
questionnaire,  survey,  or  report  requires 
a  Privacy  Act  Statement.  The  proponent 
must  consult  his  counsel,  particularly 
for  validation  of  the  authority  for  asking 
for  the  information.  Statements  must  be 
sufficiently  complete  and  specific  but,  at 
the  same  time  be  concise  and  couched 
in  easily  understood  language. 

(ii)  Forms  and  information  manage¬ 
ment  officers  at  all  echelons  must  assure 
that  Privacy  Act  Statements  are  avail¬ 
able  for  issuance  with  new  forms,  when 
required. 

(iii)  No  Department  of  Defense  com¬ 
ponent  may  deny  any  individual  any 
right,  benefit,  or  privilege  provided  by 
law  because  of  such  individual’s  refusal 
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to  disclose  his  SSN,  unless  such  disclo¬ 
sure  is: 

( a )  Required  by  Federal  statute. 

(b)  To  any  component  maintaining  a 
system  of  records  in  existence  and  op¬ 
erating  before  1  Jan  75,  if  such  dis¬ 
closure  was  required  under  statute  or 
regulation  adopted  prior  to  such  date  to 
verify  the  identity  of  an  individual.  Ex¬ 
ecutive  Order  No.  9397,  22  Nov  43,  au¬ 
thorizes  components  to  use  SSN  as  a 
system  of  numerical  identification  of 
individuals. 

(iv)  Any  component  which  requests  an 
individual  to  disclose  his  SSN  must  in¬ 
form  that  individual: 

(a)  Whether  that  disclosure  is  manda¬ 
tory  or  voluntary. 

(b)  By  what  statutory  or  other  au¬ 
thority  such  number  is  solicited. 

(c)  What  uses  will  be  made  of  it. 

(v)  If  disclosure  of  the  SSN  is  not 
required  by  Federal  statute  or  is  not  for 
a  system  of  records  in  existence  and  op¬ 
erating  prior  to  1  Jan  75,  proponents  are 
nevertheless  not  precluded  from  request¬ 
ing  it  from  individuals  concerned.  How¬ 
ever,  the  separate  Privacy  Act  Statement 
for  the  SSN  alone,  or  a  merged  Privacy 
Act  Statement,  covering  not  only  the 
SSN  but  also  other  items  of  personal  in¬ 
formation,  must  make  clear  that  the  dis¬ 
closure  of  the  SSN  is  voluntary.  If,  in 
such  instances,  the  individual  refuses  to 
disclose  it,  the  proponent  concerned 
must  be  prepared  to  identify  him  by 
alternate  means. 

(d)  Exemptions.  The  Director,  DSA 
will  designate  the  DSA  records  which  are 
to  be  exempted  from  certain  provisions 
of  the  Act,  and  DSAH-XA  will  publish 
in  the  Federal  Register,  information 
specifying  the  name  of  each  designated 
system,  the  specific  provisions  of  the  Act 
from  which  each  system  is  to  be  ex¬ 
empted,  and  the  reasons  for  each  exemp¬ 
tion  of  the  record  system. 

(1)  General  Exemptions.  To  qualify  for 
a  general  exemption,  as  defined  in  the 
Act,  the  system  of  records  must  be  main¬ 
tained  by  a  system  manager  who  per¬ 
forms  as  his  principal  function  any  ac¬ 
tivity  pertaining  to  the  enforcement  of 
criminal  laws,  including  police  efforts  to 
prevent,  control,  or  reduce  crime  or  to 
apprehend  criminals,  and  the  activities 
of  prosecutors,  courts,  correctional,  pro¬ 
bation,  pardon,  or  parole  authorities. 
Such  system  of  records  must  consist  of : 

(i)  Information  compiled  for  the  pur¬ 
pose  of  identifying  individual  criminal 
offenders  and  alleged  offenders  and  con¬ 
taining  only  identifying  data  and 
notations  or  arrests,  the  nature  and 
disposition  of  criminal  charges,  sentenc¬ 
ing,  confinement,  release,  and  parole, 
and  probation  status. 

(ii)  Information  compiled  for  the  pur¬ 
pose  of  a  criminal  investigation,  includ¬ 
ing  reports  of  informants  and  investi¬ 
gators,  and  associated  with  an  identifia¬ 
ble  individual. 

(iii)  Reports  identifiable  to  an  indi¬ 
vidual  compiled  at  any  stage  of  the  proc¬ 
ess  of  enforcement  of  the  criminal  laws 
from  arrest  or  indictment  through  re¬ 
lease  from  supervision. 
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(2)  Specific  Exemption.  To  qualify  for 
a  specific  exemption,  as  defined  by  the 
Act  the  systems  of  records  must  be: 

(i)  Specifically  authorized  under  cri¬ 
teria  established  by  an  Executive  Order 
to  be  kept  classified  in  the  interest  of 
national  defense  or  foreign  policy  and 
are  in  fact  properly  classified  pursuant 
to  such  Executive  Order. 

(ii)  Investigatory  material  compiled 
for  law  enforcement  purposes  other  than 
material  covered  under  a  general  exemp¬ 
tion.  However,  an  individual  will  not  be 
denied  access  to  information  which  has 
been  used  to  deny  him  a  right  or  priv¬ 
ilege  unless  disclosure  would  reveal  a 
source  who  furnished  information  to  the 
Government  under  a  promise  that  the 
identity  of  the  source  would  be  held  in 
confidence.  For  investigations  made  after 
27  Sep  75,  the  identity  of  the  source 
may  be  treated  as  confidential  only  if 
based  on  the  expressed  guarantee  that 
the  identity  would  not  be  revealed. 

(iii)  Maintained  in  connection  with 
providing  protective  services  to  the  Presi¬ 
dent  of  the  United  States  or  other  indi¬ 
viduals  protected  pursuant  to  18  U.S.C. 
S3056. 

(iv)  Used  only  to  generate  aggregate 
statistical  data  or  for  other  similarly 
evaluative  or  analytic  purposes,  and 
which  are  not  used  to  make  decisions  on 
the  rights,  benefits,  or  entitlements  of 
individuals  except  for  the  disclosure  of  a 
census  record  permitted  by  13  U.S.C.  S8. 

(v)  Investigatory  material  compiled 
solely  for  the  purpose  of  determining 
suitability,  eligibility,  or  qualifications 
for  Federal  civilian  employment,  Military 
Service,  Federal  contracts,  or  access  to 
classified  information,  but  only  to  the  ex¬ 
tent  that  the  disclosure  of  such  material 
would  reveal  the  identity  of  a  source  who 
furnished  information  to  the  Govern¬ 
ment  under  an  express  promise  that  the 
source  would  be  held  in  confidence,  or 
prior  to  27  Sep  75,  under  an  implied 
promise  that  the  identity  of  the  source 
would  be  held  in  confidence. 

(vi)  Testing  or  examination  material 
used  solely  to  determine  individual  qual¬ 
ifications  for  appointment  or  promotion 
in  the  Federal  service,  the  disclosure  of 
which  would  compromise  the  objectivity 
or  fairness  of  the  testing  of  elimination 
process. 

(vii)  Evaluation  material  used  to  de¬ 
termine  potential  for  promotion  in  the 
Armed  Services,  but  only  the  extent  that 
the  disclosure  of  such  material  would  re¬ 
veal  the  identity  of  a  source  who  fur¬ 
nished  information  to  the  Government 
under  an  express  promise  that  the  iden¬ 
tity  of  the  source  would  be  held  in  con¬ 
fidence  or  prior  to  27  Sep  75,  under  an 
implied  promise  that  the  identity  of  the 
source  would  be  held  in  confidence.  Sys¬ 
tem  managers  will  specify  those  cate¬ 
gories  of  individuals  for  whom  pledges 
of  confidentiality  may  be  made  when 
obtaining  information  on  an  individual’s 
suitability  for  promotion. 

(e)  System  of  Records — (1)  Content. 

(I)  System  managers  will  maintain  in 
its  records  systems  only  such  informa¬ 
tion  as  is  relevant  and  necessary  to  ac- 


FEDERAL  REGISTER,  V<$L.  40,  NO.  166— TUESDAY,  AUGUST  26,  1975 


37530 


PROPOSED  RULES 


complish  a  purpose  or  mission  required 
by  statute  or  Executive  Order  of  the 
President. 

(ii)  The  proponent  of  each  system  of 
records  will  identify  the  specific  provi¬ 
sion  of  law,  or  Executive  Order,  which 
provides  authority  for  the  maintenance 
of  information  in  each  system  of  records. 

(iii)  Authority  to  establish  and  main¬ 
tain  a  system  of  records  does  not  convey 
unlimited  authority  to  collect  and  main¬ 
tain  all  information  which  may  be  useful 
or  convenient  to  have.  The  proponent  of 
each  system  of  records  will  evaluate  each 
category  of  information  in  a  system  for 
both  necessity  and  relevance.  In  per¬ 
forming  this  evaluation  the  following 
points  will  be  considered: 

(a)  Relationship  of  each  item  of  in¬ 
formation  to  the  statutory  or  regulatory 
purpose  for  which  the  system  is  main¬ 
tained. 

(b)  Specific  adverse  consequence  of 
not  collecting  each  category  of  informa¬ 
tion. 

(c)  Possibility  of  meeting  the  informa¬ 
tion  requirement  through  use  of  infor¬ 
mation  not  individually  identifiable  or 
through  sampling  techniques. 

id)  Length  of  time  that  the  informa¬ 
tion  is  needed  and,  where  appropriate, 
techniques  for  purging  parts  of  the 
record. 

(e)  Length  of  time  that  the  informa¬ 
tion  is  needed  and,  where  appropriate, 
techniques  for  purging  parts  of  the 
record. 

(e)  Financial  cost  of  information 
maintenance  compared  to  risk  or  ad¬ 
verse  consequence  of  not  maintaining  it. 

(/)  Necessity  and  relevance  of  this  in¬ 
formation  to  all  individuals  included  in 
the  system. 

(iv)  Collection  will  be  discontinued 
for  each  category  or  item  of  information 
which,  after  the  above  evaluation,  does 
not  appear  to  be  fully  justifiable.  More¬ 
over,  such  information  will  be  withdrawn 
and  destroyed,  provided  it  can  be  eco¬ 
nomically  segregated  from  necessary  and 
relevant  information. 

(v)  The  evaluation  prescribed  above 
will  be  performed  by  each  proponent  of  a 
system  of  records: 

(a)  During  the  design  phase  of  a  new 
system  of  records  or  a  change  in  an  ex¬ 
isting  system  of  records. 

(b)  Annually,  prior  to  the  republica¬ 
tion  of  all  system  notices  in  the  Federal 
Register. 

(2)  Publication  of  record  system 
notices — (i)  General.  A  notice  of  the 
existence  of  each  system  of  records,  as 
defined  in  §  1286.3(d)  must  be  published 
in  the  Federal  Register. 

(ii)  Record  System  Notices,  System 
managers  proposing  new  systems  will 
prepare  system  notices  according  to  Ap¬ 
pendix  A  at  least  60  days  before  the  pro¬ 
posed  system  change  may  be  legally  im¬ 
plemented.  Initial  system  notices  will  be 
submitted  to  DSAH-XA. 

(iii)  Change  to  Existing  Systems  Re¬ 
quiring  Advanced  Public  Notice 

(a)  Hie  following  proposed  changes  to 
an  existing  system  must  be  published  in 
the  Federal  Register  for  public  com¬ 


ment  at  least  30  days  before  the  changes 
are  implemented: 

(1 )  Those  which  expand  the  categories 
of  individuals  on  whom  records  are 
maintained. 

(2)  Those  which  add  new  categories  of 
records  to  the  system. 

(3)  Those  which  add  new  categories  of 
sources. 

(4)  New  or  changed  routine  uses  which 
involve  disclosure  to  a  new  category  of 
recipient. 

(5)  Changes  in  procedures  governing 
access. 

(b)  Notices  of  proposed  changes  to  ex¬ 
isting  systems  will  be  submitted  to 
DSAH-XA,  in  accordance  with  Appendix 
A. 

(iv)  Changes  to  Existing  Systems  Not 
Requiring  Advanced  Public  Notice. 
Changes  in  records  systems  not  stated  in 
paragraph  (e)  (2)  (iii)  of  this  section  do 
not  require  advance  publication,  but  must 
be  submitted  for  inclusion  in  the  annual 
consolidated  listing  of  records  systems. 
Accordingly,  each  system  manager  will 
ensure  that  all  such  changes  are  for¬ 
warded  to  DSAH-XA  by  15  March  of 
each  year  for  annual  publication  in  the 
Federal  Register. 

(v)  Reports  Concerning  New  and 
Changed  Systems.  Concurrently  with 
paragraph  (e)  (2)  (ii)  and  (iii)  of  this 
section,  DSAH-XA  will  provide  OASD 
(C)  advanced  notice  of  proposals  to 
establish  new  systems  or  to  change 
routine  uses  of  existing  systems. 

(vi)  DSA  Issuances.  DSAH-XA  will 
ensure  that  information  contained  in 
each  system  notice,  as  published  in  the 
Federal  Register,  is  incorporated  and 
published  in  DSAR  5400.22,  Privacy  Act 
System  of  Records  Notices,  to  ensure  uni¬ 
form  system  use  and  maintenance.  All 
DSA  activities  will  take  Immediate  action 
to  discontinue,  any  system  of  records  not 
contained  in  DSAR  5400.22. 

(3)  Standards  of  accuracy,  (i)  Records 
used  by  system  managers  in  making  de¬ 
terminations  about  an  individual  will  be 
maintained  with  such  accuracy,  rele¬ 
vance,  timeliness,  and  completeness  as  is 
reasonably  necessary  to  ensure  fairness 
to  the  individual  in  any  determination. 

(ii)  Prior  to  disseminating  any  record 
about  an  individual  to  any  person  other 
than  a  Federal  agency,  unless  the  dis¬ 
semination  is  made  pursuant  to  DSAR 
5400.14,  reasonable  efforts  will  be  made 
to  ensure  that  such  records  are  accurate, 
complete,  timely,  and  relevant  for  DSA 
purposes. 

(4)  Restriction  on  maintenance  of  cer¬ 
tain  records.  Maintenance  of  records  de¬ 
scribing  how  individuals  exercise  rights 
guaranteed  by  the  First  Amendment  are 
prohibited  unless  expressly  authorized 
by'  Federal  statute  or  by  the  individual 
concerned,  unless  pertinent  to  and  within 
the  scope  of  an  authorized  law  enforce¬ 
ment  activity.  The  exercise  of  these 
rights  Includes,  but  is  not  limited  to,  re¬ 
ligious  and  political  beliefs,  freedom  of 
speech  and  the  press,  and  the  right  of 
assembly,  and  to  petition. 

(5)  Rules  of  conduct.  Heads  of  HQ 
DSA  PSEs  and  Heads  of  PLFAs  will  as¬ 


sure  that  persons  including  Government 
contractors  or  their  employees,  involved 
in  the  design,  development,  operation,  or 
maintenance  of  any  system  of  records,  as 
defined  in  $  1286.3,  are  informed  of  all 
requirements  to  protect  the  privacy  of 
the  individuals  who  are  subjects  of  the 
records.  The  following  sanctions  will  be 
emphasized  to  personnel : 

(i)  There  are  criminal  penalties  for 
knowingly  and  willfully  disclosing  a  rec¬ 
ord  about  an  individual  without  the  writ¬ 
ten  consent  or  the  written  request  of 
that  individual,  or  unless  disclosure  is 
for  one  of  the  reasons  listed  in  para¬ 
graph  (d)  of  this  section. 

(ii)  DSA  may  be  subject  to  civil  suit 
due  to  failure  to  comply  with  the  Act. 

(6)  Safeguarding  personal  informa¬ 
tion  in  records  systems,  (i)  System  man¬ 
agers  will  establish  administrative  and 
physical  safeguards  to  protect  informa¬ 
tion  from  unauthorized  or  unintentional 
access,  disclosure,  modification,  or  de¬ 
struction.  These  safeguards  will  apply  to 
systems  of  records,  in  whatever  medium 
in  which  personal  information  is  proc¬ 
essed  or  stored.  Such  safeguards  will  be 
tailored  to  the  requirements  of  each  sys¬ 
tem  of  records.  Where  a  greater  degree  of 
protection  is  not  prescribed  by  other  reg¬ 
ulations,  as  a  minimum,  all  records  will 
be  afforded  the  same  degree  of  protection 
as  “FOR  OFFICIAL  USE  ONLY"  docu¬ 
ments. 

(ii)  Access  to  personal  Information 
will  be  restricted  to  those  persons  whose 
official  duties  require  access  and  the  indi¬ 
vidual  concerned  in  accordance  with 
paragraph  (b)  of  this  section. 

(iii)  System  managers  will  ensure  that 
all  persons  whose  official  duties  require 
access  to  or  processing  and  maintenance 
of  personal  information  are  trained  in 
the  proper  safeguarding  and  use  of  such 
information. 

(iv)  Personal  records  and  documents 
will  be  stored  so  as  to  reasonably  pre¬ 
clude  unauthorized  disclosure. 

(v)  Disposal  of  records  containing 
personal  information  which  are  no  longer 
required  will  be  accomplished  in  such  a 
manner  that  will  prevent  the  contents 
from  being  disclosed  (e.g.,  tearing  or 
shredding  the  record  into  pieces  or  burial 
or  in  the  case  of  magentic  tapes  by  de¬ 
gaussing)  . 

§  1286.6  Forms  and  reports. 

(a)  An  annual  report  will  be  prepared 
by  DSAH-XA  for  the  preceding  calendar 
year  on  its  implementation  of  the  Privacy 
Act  of  1974  as  follows: 

(1)  Summary.  A  brief  management 
summary  of  the  status  of  actions  taken 
to  comply  with  the  Act,  the  results  of 
these  efforts,  any  problems  encountered 
and  recommendations  for  any  changes  in 
legislation,  policies,  or  procedures. 

(2)  Accomplishments.  A  summary  of 
major  accomplishments:  i.e.,  improve¬ 
ments  in  agency  information  practices 
and  safeguards. 

(3)  Plans.  A  summary  of  major  plans 
for  activities  in  the  upcoming  year,  e.g* 
area  of  emphasis,  additional  securing  of 
facilities  planned. 
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(4)  Exemptions.  A  list  of  systems 
which  are  exempted  during  this  year 
from  any  of  the  operative  provisions  of 
this  law  permitted  under  the  terms  of 
subsections  (j)  and  (k)  of  the  Act, 
whether  or  not  the  exemption  was  ob¬ 
tained  during  the  year,  the  number  of 
records  in  each  system  exempted  from 
each  specific  provision  and  reasons  for 
invoking  the  exemption. 

(5)  Number  of  systems.  A  brief  sum¬ 
mary  of  changes  to  the  total  inventory 
of  personal  data  systems  subject  to  the 
provisions  of  the  Act,  including  reasons 
for  major  changes;  e.g.,  the  extent  to 
which  review  of  the  relevance  of  and 
necessity  for  records  has  resulted  in 
elimination  of  all  or  portions  of  systems 
of  records  or  any  reduction  in  the  num¬ 
ber  of  individuals  on  whom  records  are 
maintained. 

(6)  Operational  experiences.  A  gen¬ 
eral  description  of  operational  experi¬ 
ences  including  estimates  of  the  number 
of  individuals  (in  relation  to  the  total 
number  of  records  in  the  system)  re¬ 
questing  information  on  the  existence  of 
records  pertaining  to  them,  refusing  to 
provide  information,  requesting  access  to 
their  records,  appealing  initial  refusals 
to  amend  records,  and  seeking  redress 
through  the  courts. 

(7)  Any  available  data,  or  estimates, 
of  the  cost  of  administering  the  Act. 

(8)  Six  copies  of  the  annual  report 
will  be  furnished  to  the  Assistant  Secre¬ 
tary  of  Defense  (Comptroller)  on  or  be¬ 
fore  31  March  of  each  year  for  trans¬ 
mittal  to  the  Office  of  Management  and 
Budget. 

(b)  An  annual  feeder  report  on  the 
actions  of  the  preceding  year  will  be  pre¬ 
pared  by  Heads  of  PLFAs  and  Heads  of 
HQ  DSA  PSEs  for  submission  in  dupli¬ 
cate  to  DSAH-XA  on  or  before  10  March 
of  each  year.  The  report  will  contain: 

(1)  Summary.  A  brief  management 
summary  of  the  status  of  actions  taken 
to  comply  with  the  Act,  the  results  of 
these  efforts,  any  problems  encountered 
and  recommendations  for  any  changes 
in  legislation,  policies  or  procedures. 

(2)  Accomplishments.  A  summary  of 
major  accomplishment;  i.e.,  improve¬ 
ments  in  agency  information  practices 
and  safeguards. 

(3)  Plans.  A  summary  of  major  plans 
for  activities  in  the  upcoming  year,  e.g., 
area  of  emphasis,  additional  securing  of 
facilities  planned. 

(4)  Exemptions.  A  list  of  systems 
which  are  exempted  during  the  year 
from  any  of  the  operative  provisions  of 
this  law  permitted  under  the  terms  of 
subsection  (j)  and  (k)  of  the  Act, 
whether  or  not  the  exemptions  were  ob¬ 
tained  during  the  year,  the  number  of 
records  in  each  system  exempted  from 
each  specific  provision  and  reason  for  in¬ 
voking  the  exemption. 

(5)  Number  of  systems.  A  brief  sum¬ 
mary  of  changes  to  the  total  inventory 
of  personal  data  systems  subject  to  the 
provisions  of  the  Act,  including  reasons 
for  major  changes;  e.g.,  the  extent  to 
which  review  of  the  relevance  of  and 
necessity  for  records  has  resulted-  In 
elimination  of  all  or  portions  of  systems 


of  records  or  any  reduction  in  the  num¬ 
ber  of  individuals  on  whom  records  are 
maintained. 

(6)  Operational  experiences.  A  gen¬ 
eral  description  of  operational  experi¬ 
ences  including  estimates  of  the  num¬ 
ber  of  individuals  (in  relation  to  the  total 
number  of  records  in  the  system)  re¬ 
questing  information  on  the  existence  of 
records  pertaining  to  them,  refusing  to 
provide  information,  requesting  access  to 
their  records,  appealing  initial  refusals 
to  amend  records,  and  seeking  redress 
through  the  courts. 

(7)  Any  available  data,  or  estimates, 
of  the  cost  of  administering  the  Act. 

(c)  Each  PLFA  will  submit  to  HQ  DSA, 
ATTN:  DSAH-XA  during  the  last  week 
in  January,  April,  July,  and  October  each 
year,  a  consolidated  listing  of  those  lo¬ 
cally  controlled  and  subordinate  echelon 
forms  affected  by  the  Act.  The  listing  will 
contain  the  form  designation  and  -num¬ 
ber  in  numeric  sequence,  the  edition  date, 
and  the  complete  title.  Each  group  of 
forms  will  be  identified  by  activity  name. 
To  provide  the  input  for  this  consolidated 
listing,  the  forms  management  officer  at 
all  levels  must  prepare  and  maintain 
current,  a  listing  of  those  forms  for 
which  they  control  and  which  are  within 
the  purview  of  the  Act. 

(d)  The  Reports  Control  Symbol  for 
these  reports  will  be  RCS  DD(A)  1379. 

Appendix  A 

INSTRUCTIONS  FOR  PREPARATION  OF  RECORD 
SYSTEM  NOTICES 

Section  I.  General  Instructions 

A.  For  each  system  of  records  submit  in¬ 
formation  in  the  sequence  as  shown  in  sec¬ 
tion  n  below.  Show  in  this  sequence  even 
though  an  entry  may  not  be  required  for  all 
items. 

B.  Use  keywords  shown  below  (i.e.,  SYS- 
NAME,  RECORD-CATEGORY,  etc.).  Expla¬ 
nations  of  keywords  are  shown  in  parenthe¬ 
ses,  but  do  not  use. 

C.  Do  not  use  paragraph  or  subparagraph 
numbers  or  letters. 

D.  Do  not  underline  any  part  of  the  text. 

E.  Do  not  use  hyphenation  at  the  end  of  a 
line  or  subdivide  a  word  at  the  end  of  a  line. 

G.  Each  system  of  records  notice  will  be 
typed  double-spaced  on  a  separate  sheet  (s) 
of  paper,  with  the  originating  office  symbol 
entered  in  the  upper  right  corner. 

H.  Do  not  use  military  or  Government  ter¬ 
minology  which  may  not  be  understood  by 
the  public.  Authorized  abbreviations  may  be 
used,  provided  they  are  first  spelled  out  in 
each  system  notice,  e.g..  Defense  Supply 
Agency  (DSA). 

I.  Refer  to  section  III  below  for  systems 
which  may  qualify  for  exemption. 

J.  Number  the  pages  separately  for  each 
draft  system  notice. 

K.  New  and  revised  system  notices  shall  be 
prepared  in  accordance  with  Instructions 
contained  herein.  All  notices  are  to  be  sub¬ 
mitted  in  full  (i.e.,  no  partial  system  notice 
shall  be  accepted) . 

L.  For  the  purpose  of  identifying  record 
systems  and  preparing  system  of  records  no¬ 
tices,  there  are  five  distinguished  categories 
of  record  systems  subject  to  the  Act: 

1.  Category  1.  Automated  (ADP)  systems 
of  records  identified  by  distinctive  number 
and  title  and  normally  maintained  according 
to  ADP  manuals.  As  a  general  rule,  these 
systems  are  not  individually  or  specifically 
identified  by  DSAM  5015.1,  Files  Maintenance 


and  Disposition,  although  their  output  may 
be  functionally  identifiable  through  the 
manual.  For  preparation  of  systems  notices, 
there  are  three  recognizable  types  of  ADP 
systems: 

a.  Class  A  and  B  systems  managed  by  HQ 
DSA.  Most  of  these  systems  are  identified 
in  the  DoD  Automated  Data  Systems  Catalog 
LSPC  3-70-1. 

b.  Class  C  Systems.  Individually  designed, 
established,  and  maintained  by  DSA  field 
activities. 

c.  DSA  field  activities  systems  which  are 
not  yet  approved  are  classified  as  Class  C 
systems,  i.e.,  unauthorized  systems. 

2.  Category  2  Exclusive  of  ADP  Systems, 
those  systems  of  records  established  and 
maintained  pursuant  to  and  specifically  pre¬ 
scribed  by  statute,  executive  order,  or  DSAR. 

3.  Category  3.  Exclusive  of  ADP  Systems, 
those  systems  of  records  established  under  a 
function  authorized  by  statute.  Executive 
Order  or  DSAR  rather  than  specifically  pre¬ 
scribed  by  the  statute,  Executive  Order  or 
DSAR,  that  are  accumulated  DSA-wlde  by 
offices  with  similar  or  identical  functions. 
Normally,  decentralized  segments  of  such 
systems  vary  only  in  scope  and  volume  and 
not  in  content,  for  example,  name  files  which 
are  established  in  processing  requests  under 
the  Freedom  of  Information  Act.  In  most 
instances,  these  systems  are  identified  in 
DSAM  5015.1. 

4.  Category  4.  Exclusive  of  ADP  Systems, 
those  systems  of  records  established  and 
maintained  entirely  in  response  to  local 
needs.  Although  often  difficult  to  describe, 
these  systems  have  certain  common  charac- 
terstics  which  can  be  used  in  identifying 
them  for  preparation  of  systems  notices: 

a.  Normally,  they  are  unique  to  the 
accumulating  office. 

b.  They  are  not  accumulated  DSA-wide  in 
other  elements  or  activities  which  perform 
like  functions. 

c.  They  are  seldom  specifically  identified 
in  DSAM  5015.1. 

5.  Category  5.  Those  in  the  custody  of 
DSA  temporarily,  which  "belong”  to  other 
Federal  agencies.  For  example,  official  civil¬ 
ian  personnel  files  on  DSA  civilian  employees 
belong  to  the  U.S.  Civil  Service  Commission. 
Most  such  systems  are  identified  by  DSAM 
6015.1. 

M.  Responsibility  for  preparation  of 
system  of  records  notices. 

1.  For  Category  1  (ADP)  Systems  of 
Records: 

a.  Managers  of  Class  A  and  B  systems  of 
records  are  responsible  for  preparing  system 
of  record  notices  applicable  to  their  auto¬ 
mated  data  systems  (ADS). 

b.  Proponents  of  Categories  2,  3,  4,  and  5 
(manual)  systems  of  records  are  responsible 
for  including  in  their  systems  of  record  no¬ 
tices  all  Class  C  and  unauthorized  ADP  sys¬ 
tems  of  records  which,  in  effect,  are  auto¬ 
mated  segments  of  their  systems  of  records. 

c.  Managers  are  responsible  for  preparation 
and  submission  of  system  of  record  notices 
applicable  to  those  Class  C  and  unauthorized 
ADP  system  of  records  which  are  not  auto¬ 
mated  segments  of  a  manual  system  of 
records. 

2.  For  Category  2  and  3  system  or  records, 
the  office  having  DSA-wide  staff  responsi¬ 
bility  for  the  function  or  process  involved  is 
considered  to  be  the  system  of  records  pro¬ 
ponent.  Such  proponents  are  responsible  for 
including  in  their  system  of  record  notices 
coverage  of  all  decentralized  segments  of 
the  particular  system  of  records. 

3.  Proponents  of  Category  4  (local)  systems 
of  records  are  responsible  for  preparation  and 
submission  of  system  notices  applicable  to 
their  systems. 

4.  For  Category  5,  the  proponent  is  the 
Federal  agency  to  which  a  system  of  records 
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belongs.  It  is  responsible  lor  system  of  rec¬ 
ords  notices  applicable  to  Its  records  that 
are  temporarily  In  DSA  custody.  For  example, 
the  CSC  will  publish  system  of  records  no¬ 
tices  applicable  to  all  systems  of  records 
prescribed  by  the  Federal  Personnel  Manual. 
CSC  will  not,  however,  be  responsible  for 
any  modifications  or  additions  to  a  CSC  sys¬ 
tem  of  record.  The  DSA  proponent  of  such 
modifications  or  additions  Is  therefore  re¬ 
sponsible  for  preparing  a  system  of  records 
notice  for  the  portion  added  by  him.  DSA 
proponents  6hould  contact  the  appropriate 
Federal  agency  for  other  systems  of  records 
temporarily  in  DSA  custody  to  determine  and 
fix  responsibility  for  preparing  applicable 
system  of  records  notices.  In  Instances  where 
a  Federal  agency  to  which  the  records  be¬ 
long  declines  to  cover  a  system  of  records 
temporarily  In  DSA  custody,  the  DSA  pro¬ 
ponent  will  be  responsible  for  preparing  the 
applicable  system  of  records  notice. 

Section  n.  Sequence  of  Submissions  and 
Instructions 

A.  Manual  or  Automated.  Indicate  whether 
the  system  Is  manual  or  automated.  An  auto¬ 
mated  system  would  Include  records  proc¬ 
essed.  maintained,  or  both.  In  a  machine 
readable  processing  tapes  and  cards,  etc.  A 
manual  system  would  Include  records  proc¬ 
essed,  maintained,  or  both,  in  a  human  read¬ 
able  or  vertical  file  cards,  microfiche,  roll 
microfilm,  photographs,  etc.  A  mechanized 
file  which  requires  substantial  human  Inter¬ 
vention  for  processing  or  maintenance  Is 
considered  to  be  manual,  rather  than  auto¬ 
mated. 

B.  Symame  ( System  Name) .  Whenever  ap¬ 
plicable,  Identify  the  system  by  number  and 
title  prescribed  In  your  files  or  records  dis¬ 
position  manual.  Use  locally  originated  titles 
for  files  which  are  not  described  specifically 
end  adequately  In  the  manual  or  which  are 
otherwise  unique  to  the  reporting  office.  If 
more  than  one  system  Is  covered  by  a  file 
description.  Identify  each  system.  If  several 
files,  separately  described  In  DSAM  6015.1, 
are  a  part  of  a  single  system.  Identify  the 
system  only  (see  paragraph  F  below  for  Iden¬ 
tification  of  separate  files  which  form  a  sys¬ 
tem)  .  Provide  system  and  file  title  In  un¬ 
classified  form.  Do  not  use  abbreviations, 
nicknames,  or  acronyms  unless  spelled  out 
the  first  time  used.  Place  acronyms  In  paren¬ 
theses  Immediately  following  the  title. 

C.  Security.  Specify  the  Defense  or  other 
security  classification  for  the  system  of  rec¬ 
ords  If  classified  pursuant  to  the  provisions 
of  DoD  6200. 1-R,  Information  Sec’uity  Pro¬ 
gram  Regulation,  D6AM  6205.1,  Safeguarding 
of  Classified  Information,  and  Implementing 
directives.  Do  not  cite  as  a  security  classifica¬ 
tion  FOR  OFFICIAL  USE  ONLY,  INTERNAL 
WORKING  PAPER,  EYES  ONLY,  or  similar 
marking  used  for  Internal  control  or  other 
handling  purposes.  If  unclassified,  Including 
FOUO,  state  unclassified. 

D.  Location.  If  the  system  Is  maintained 
In  a  single  location,  provide  the  exact  name 
of  the  office,  organization,  and  correspond¬ 
ence  or  routing  symbol.  On  the  other  hand,  if 
it  Is  geographically  or  organizationally  de¬ 
centralized,  specify  each  type  of  organiza¬ 
tion  or  element  that  maintains  a  segment 
of  the  system.  For  example.  If  the  system  was 
comprised  of  clinical  reoords,  then  medical 
centers  and  hospitals,  and  the  National  Per¬ 
sonnel  Records  Center  would  be  listed  as  lo¬ 
cations.  Where  automated  data  systems 

compass  a  central  computer  facility,  with 
InpwVoutput  terminals  at  several  geographi¬ 
cal  locations,  list  by  category,  each  location 
under  this  heading.  In  all  Instances  where 
multiple  locations  are  referred  to  by  type  of 
organisation,  state  that  official  mailing  ad¬ 
dresses  are  In  the  Department  of  Defense 
directory  In  the  appendix  to  the  DSA  sys¬ 


tem  of  record  notices.  However,  In  all  cases, 
give  the  official  mailing  address  If  the  office 
maintaining  the  system  is  not  listed  In  the 
Federal  Register.  If  the  address  is  classified, 
so  stats.  Be  sum  to  list  each  type  of  organi¬ 
zation  maintaining  a  segment  or  duplicate 
of  the  system,  since  maintenance  by  a  type 
of  organization  not  reported  herein  will  con¬ 
stitute  a  violation  of  the  Act.  When  Indicat¬ 
ing  domestic  addresses,  use  the  United  States 
Postal  Service  two  letter  state  abbreviation 
and  the  Zip  Code. 

E.  Individual-Category  ( Categories  of  In¬ 
dividuals  Covered  by  the  System).  The  pur¬ 
pose  of  this  requirement  Is  to  permit  an 
individual  to  determine  whether  or  not  In¬ 
formation  on  him  might  be  In  the  system  of 
records.  Categories  of  Individuals,  therefore, 
should  be  stated  In  easily  understood,  non¬ 
technical  terms  and  Include  all  categories  of 
Individuals  on  whom  records  are  maintained. 
Avoid  using  broad  general  descriptions,  such 
as  "all  civilian  personnel’’,  unless  the  system 
applies  to  all  civilian  personnel.  For  example. 
Civilian  Individual  Pay  Record  applies  to  all 
civilian  employees  of  DSA,  while  a  system 
of  records  of  Individual  Retirement  Records 
would  apply  only  to  civilian  employees 
covered  by  the  Civil  Service  Retirement  pro¬ 
gram.  All  categories  of  Individuals  Included 
In  the  system  must  be  listed,  regardless  of 
the  frequency  of  Inclusion  or  the  number  of 
records  Involved.  All  future  changes  to  the 
system,  which  broaden  or  Increase  the  cate¬ 
gories  of  Individuals  covered,  will  require 
preparation  and  publication  of  a  revised  rec¬ 
ord  system  notice  in  the  Federal  Register. 

F.  Record  Category  (Categories  of  Records 
in  the  System ) .  Briefly  describe  In  nontech¬ 
nical  terms  all  types  of  records  In  the  sys¬ 
tem.  For  example,  under  the  Automatic  Pay¬ 
roll  Cost  and  Personnel  System  (APCAPS), 
the  types  would  Include,  but  not  be  limited 
to  Individual  pay  record,  substantiating 
documents,  such  as  certificates  for  deduc¬ 
tions  and  retained  leave  and  earning  state¬ 
ments,  records  of  travel  payments,  personnel 
actions,  and  time  and  attendance  cards.  For 
automated  systems,  do  not  list  source  docu¬ 
ments  unless  they  are  retained  and  filed  by 
name,  SSN,  or  other  Individual  Identifier. 
Instead,  list  the  categories  of  Information 
stored  In  the  system.  Be  sure  to  Include  all 
types  of  records  in  the  system,  regardless  of 
their  frequency  or  volume  of  accumulation, 
since  future  additions  of  new  types  of 
records  will  require  preparations  and  pub¬ 
lication  of  revised  public  notices  in  the 
Federal  Register. 

Q.  Authority  ( Authority  for  Maintenance 
of  the  System).  Cite  the  specific  provision  of 
a  Federal  statute  or  Executive  Order  of  the 
President,  Including  the  title  thereof,  which 
authorizes,  or  provides  a  legal  basis  for, 
maintenance  of  the  system.  Do  not  dte  regu¬ 
lations.  In  this  connection,  authority  for  a 
system  may  be  derived  from  a  statute  or  Ex¬ 
ecutive  Order  which: 

1.  Explicitly  authorizes  or  directs  the 
agency  to  maintain  &  system  of  records. 

2.  Authorizes  or  directs  DSA  to  perform  a 
function,  the  discharge  or  which  requires 
maintenance  of  the  system  of  records. 
(NOTE:  Check  with  the  appropriate  Counsel 
for  assistance  In  determining  the  statutory 
or  regulatory  basis  for  the  system) . 

H.  Routine  Uses  (Routine  Uses  of  Records 
Maintained  in  the  System,  Including  Cate¬ 
gories  of  Users  and  the  Purposes  of  Such 
Uses ) 

I.  Besentlally,  this  requirement  calls  for 
the  following  information  In  nontechnical 

terms: 

a.  The  purpose(s)  for  which  information 
In  the  system  is  collected. 

b.  Each  category  of  user. 

c.  The  specific  use(s)  made  of  the  infor¬ 
mation  by  each  user. 


2.  Each  category  of  user  and  each  use  must 
be  reported.  Any  proposed  new  use  or  cate¬ 
gory  of  user,  or  change  tn  an  existing  use, 
which  has  the  effect  of  expanding  the  avail¬ 
ability  of  the  information  In  the  system,  will 
require  pubUcatlon  of  a  revised  notice  In  the 
Federal  Register.  Any  such  proposed  change 
In  a  routine  use  must  also  be  described  In  an 
advanced  notice  In  the  Federal  Register  to 
permit  SO  days  for  public  comment  before 
It  is  Implemented. 

3.  As  defined  by  6  UJB.C.  522a,  the  term 
“routine  use”  means  with  respect  to  the  dis¬ 
closure  of  a  record,  the  use  of  such  record  for 
a  purpose  which  is  compatible  with  the  pur¬ 
pose  for  which  It  was  collected. 

4.  "Uses”  can  be  distinguished  from  "pur¬ 
poses”  In  that  “purposes”  describe  the  objec¬ 
tives  for  collecting  or  maintaining  Informa¬ 
tion.  “Uses”  are  the  specific  ways  or  processes 
in  which  the  Information  Is  employed.  In¬ 
cluding  the  persons  or  organizations  to  whom 
the  record  may  be  disclosed.  For  example, 
the  purposes  for  collecting  information  may 
be  to  evaluate  an  application  for  a  veteran’s 
benefit  and  to  Issue  checks.  “Uses”  might  In¬ 
clude  verification  of  certain  Information 
with  the  appropriate  Military  Service  and  re¬ 
lease  of  check  data  to  the  Department  of  the 
Treasury.  List  under  routine  uses  if  contrac¬ 
tors  are  engaged  to  perform  a  service,  such 
as  key  punch,  optical  scan,  or  telecommu¬ 
nications  in  connection  with  the  operation 
of  an  automated  data  system.  List  also  Fed¬ 
eral  agencies  to  which  personal-type  infor¬ 
mation  Is  disclosed,  Including  automated 
system  Interfaces,  and  the  purposes  for 
which  the  disclosures  are  made. 

6.  Each  proponent  of  a  system  (l.e.,  that 
office  or  organization  proposing,  directing, 
or  otherwise  responsible  for  the  system) 
must  prescribe  the  “routine”  uses  of  the 
records.  Routine  use  does  not  merely  encom¬ 
pass  the  common  and  ordinary  uses  to  which 
records  are  put,  but  also  Includes  all  of  the 
proper  and  necessary  usee  regardless  of  fre¬ 
quency.  For  example,  individual  Income  tax 
returns  are  routinely  used  by  the  Internal 
Revenue  Service  to  audit  the  amount  of  tax 
due  and  for  assistance  on  collection  of  such 
tax  by  civil  proceedings.  They  are  used  less 
often,  however,  for  referral  to  the  Depart¬ 
ment  of  Justice  for  possible  criminal  prose¬ 
cution  of  fraud  or  tax  evasion.  Therefore,  the 
“routine”  use  of  such  records  would  Include 
referrals  to  the  Department  of  Justice.  In 
addition,  description  of  “routine  use”  shall 
Include  the  fact  that  any  individual  records 
In  a  system  of  records  might  be  transferred 
to  any  component  of  the  Department  of  De¬ 
fense.  It  should  be  expected  normally  that 
“routine  use”  would  Include  disclosure  to 
law  enforcement  or  Investigatory  authorities 
for  Investigation  and  possible  criminal  pros¬ 
ecution,  civil  court  action,  or  regulatory 
order. 

L  Policy -practice  ( Policies  and  Practices 
for  Storing,  Retrieving,  Accessing,  Retaining, 
and  Disposing  of  Records  in  the  System). 
Describe  how  records  in  the  system  are  man¬ 
aged  during  their  life-cycle.  When  feasible, 
extract  pertinent  Information  from  your  files 
or  DSAM  6015.L 

1.  Storage.  In  describing  records  storage, 
specify  the  medium  In  which  they  are  main¬ 
tained,  such  as  paper  records  In  file  folders, 
visible  or  vertical  file  cards,  computer  mag¬ 
netic  tapes,  or  disks,  computer  paper  print¬ 
outs,  aperture  cards,  microfiche,  roll  micro¬ 
film,  photographs,  video-tape,  etc. 

2.  Retrievabiltty  Specify  how  Information 
Is  accessed  and  retrieved,  such  as  by  name, 
SSN,  Military  Service  number,  or  other  Iden¬ 
tification  number,  classification  or  personal 
characteristics,  such  as  fingerprint  classifi¬ 
cation,  voles  print  Identifier,  etc.  Indicate 
further  whether  conventional  or  computer¬ 
ized  Indices  are  required  to  retrieve  Individ¬ 
ual  reoords  from  the  system. 
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3.  Safeguards.  Describe  what  measures  are 
taken  to  prevent  unauthorized  disclosure  ol 
the  records  and  state  the  categories  of  Indi¬ 
viduals  authorized  access  to  the  records. 
Specify  system  safeguards,  such  as  safes, 
vaults,  locked  cabinets  or  rooms,  guards, 
personnel  screening,  visitor  registers,  com¬ 
puter  “fan-safe"  systems  software,  etc. 
(NOTE:  Do  not  describe  security  safeguards 
in  such  detaU  as  to  increase  the  risk  of  un¬ 
authorized  access  to  the  records.) 

4.  Retention  (Retention  and  Disposal). 
State  rules  on  how  long  the  records  are  to  be 
maintained;  If  and  when  they  are  moved  to 
Federal  Records  Centers,  or  to  the  National 
Archives  or  other  designated  depository;  and 
If,  when  and  how  they  are  destroyed,  or 
otherwise  disposed  of.  Changes  In  this  Item 
will  not  normally  require  Immediate  publica¬ 
tion  of  a  revised  public  notice  unless  they 
reflect  an  expansion  in  the  availability  of  or 
access  to  the  system  of  records. 

J.  Sysmanager  (Title  and  Duty  Address  of 
the  Agency  Officials  Responsible  for  the  Sys¬ 
tem)  .  In  all  cases,  enter  the  title  of  the  offi¬ 
cial  who  Is  responsible  for  policies  and  pro¬ 
cedures  governing  the  system;  l.e..  Staff  Di¬ 
rector,  Civilian  Personnel,  HQ  DSA.  If  the 
title  of  the  official  Is  unknown  or  unknow¬ 
able  (such  as  for  locally  evolved  systems), 
specify  the  Commander  or  the  Head  of  the 
Office  as  the  responsible  official.  In  addition, 
for  geographically  or  organizationally  decen¬ 
tralized  systems,  where  Individuals  may  deal 
directly  with  agency  officials  at  each  location 
to  exercise  their  rights  under  the  Act,  give 
the  position  or  duty  title  of  each  category  of 
official  responsible  for  the  Bystem,  or  a  seg¬ 
ment  thereof.  For  example.  In  the  case  of  In¬ 
dividual  accident  case  report  records,  the 
entries  should  be;  Staff  Director,  Civilian 
Personnel,  HQ  DSA,  and  Safety  Officers  of 
PLFAs.  Do  not  Include  the  duty  address  If 
already  listed  In  organizational  directories 
mentioned  In  paragraph  D  above. 

K.  Notification  (Procedure  Whereby  Indi¬ 
viduals  Can  be  Notified  at  Their  Request  if 
the  System  Contains  Records  Pertaining  to 
Them) 

1.  Indicate  whether  or  not  requests  from 
Individuals  should  be  addressed  to  the  above 
SYSMANAGER  as  In  paragraph  J  above.  If 
requests  are  to  be  addressed  to  any  other  offi¬ 
cials,  list  them  by  duty  or  position  titles. 

2.  Specify  what  Information  will  be  re¬ 
quired  from  the  requesting  Individual  to  de¬ 
termine  whether  or  not  the  system  contains 
a  record  about  him,  such  as  full  name,  mili¬ 
tary  status,  SSN  or  service  number,  resident 
or  nonresident,  etc. 

3.  List  by  specific  name,  or  categories,  those 
offices  which  the  requester  may  visit  to  ob¬ 
tain  Information  on  whether  the  system  con¬ 
tains  records  pertaining  to  him  or  her. 

4.  For  personal  visits,  specify  what  data 
the  requester  must  present  as  proof  of  Iden¬ 
tity,  such  as  a  combination  of  full  name,  date 
and  place  of  birth,  parent’s  name,  driver’s 
license,  or  medicare  card,  etc.  Do  not  require 
verification  of  Identity  for  records  which  are 
dlsclosable  under  the  Freedom  of  Information 
Act. 

L.  Access  (Procedures  Whereby  an  Indi¬ 
vidual  Can  be  Notified  at  His  Request  How  He 
Can  Gain  Access  to  Any  Record  Pertaining  to 
Himself  contained  in  the  system  of  records). 
Include  the  title  or  category  of  officials  who 
can  provide  assistance,  If  those  officials  are 
other  than  the  SYSMANAGER  above.  If  the 
mailing  addresses  are  listed  In  the  organiza¬ 
tional  directory,  state  that  official  mailing  ad¬ 
dresses  are  In  the  Department  of  Defense 
directory  In  the  appendix  to  the  DSA  systems 
notice.  Specific  locations  and  telephone  num¬ 
bers  of  offices  may  be  Indicated  for  unique  or 
centralized  systems. 

M.  Contest  (Rules  Per  Access  and  Contest¬ 
ing  Contents  of  Reoords).  To  comply  with 


this  requirement,  merely,  state:  “The 
agency's  rules  for  access  to  records  and  for 
contesting  contents  and  appealing  Initial 
determinations  by  the  Individual  concerned 
may  be  obtained  from  the  SYSMANAGER”. 

N.  Source  (Categories  of  Sources  of  Records 
in  the  System ).  List  by  type  each  source  of 
Information  in  the  system,  e.g.,  previous  em¬ 
ployers,  financial  institutions,  educational  In¬ 
stitutions,  trade  associations,  automated  sys¬ 
tem  Interfaces,  etc.  Specific  Individuals  or  In¬ 
stitutions  need  not  be  identified  by  name. 
Again,  be  sure  to  Include  all  types,  since  col¬ 
lection  of  Information  from  types  of  sources 
other  than  listed  will  require  publication  of 
a  revised  public  notice  In  the  Federal  Regis¬ 
ter  before  any  Information  Is  collected  from 
those  sources. 

Section  III.  Systems  Qualified  and  Proposed 
fob  Exemption 

Generally,  the  following  records  may  be 
exempted  from  the  provisions  of  K,  L,  and  N 
of  section  II  above  (subsection  (e)(4)(G). 
(H) ,  and  (I)  of  the  Act) : 

1.  Records  maintained  by  the  Central 
Intelligence  Agency. 

2.  Records  compiled  to  ensure  protection  of 
the  President  or  other  officials,  classified 
records,  records  required  by  statute  to  be 
maintained  and  used  solely  as  statistical 
records. 

3.  Investigatory  records  compiled  solely  for 
the  purpose  of  determining  suitability,  eligi¬ 
bility,  or  qualifications  for  Federal  civilian 
employment.  Military  Service,  Federal  con¬ 
tracts,  or  access  to  classified  Information,  but 
only  to  the  extent  as  outlined  In  subsection 
(k)  (5)  of  the  Act. 

4.  Certain  testing  and  examination  mate¬ 
rial. 

5.  Certain  material  used  to  evaluate  poten¬ 
tial  for  promotion  In  the  Armed  Services.  (All 
Items  In  section  II,  above  will  be  completed 
for  systems  proposed  for  exemption,  except 
for  K,  L,  M,  and  N).  Cite  the  system  name 
and  specific  provisions  of  the  Act,  from  which 
the  system  Is  to  be  exempted  and  the  rea¬ 
sons  therefor.  Consult  with  Counsel  for  de¬ 
tailed  guidance  for  systems  which  may  be 
eligible  for  exemption.  Proponents  of  systems 
dealing  with  the  above  types  of  records  Should 
contact  the  appropriate  records  management 
staff  for  additional  guidelines.  If  necessary, 
for  preparing  exemption  notices  for  publica¬ 
tion  In  the  Federal  Register.  (Note:  No  sys¬ 
tem  of  records  Is  exempted  from  the  public 
notice  requirements  of  the  Act).  Failure  to 
publish  such  a  notice  constitutes  a  criminal 
violation. 

Appendix  B 

detailed  instructions  fob  forms  and  in¬ 
formation  REQUIREMENTS  SUBJECT  TO  THE 

PRIVACY  ACT  OF  1974 

1.  Fill-in  Information  on  the  preprinted 
blank  Privacy  Act  Statement  format  will  be 
completed  by  the  functional  element  respon¬ 
sible  for  the  form.  It  will  be  completed  by 
typewriter,  for  use  as  a  camera  copy  to  re¬ 
produce  and  distribute  to  users  of  the  form 
to  which  the  statement  applies. 

2.  The  forms  management  office  will  as¬ 
sign  an  edition  date  in  the  block  provided, 
and  when  revised,  a  new  edition  date  will  be 
assigned.  Edition  dates  assigned  the  Privacy 
Act  Statements  may  differ  from  the  date  of 
the  form  described  In  the  Statement  since 
each  may  be  revised  without  revision  to  the 
other.  The  same  edition  dates  will  be  assigned 
to  both  form  and  related  statement  when 
processed  simultaneously  as  new  or  revised 
actions.  When  Privacy  Act  Statements  are 
revised,  previous  editions  will  always  be  ob- 
soleted.  A  supersession  notice  obsoletlng  the 
previous  edition  will  be  shown  In  the  bot¬ 
tom  border  of  the  statement  In  the  same 
manner  as  shown  on  forms  when  superseding 


a  previous  edition.  No  form  number  Is  as¬ 
signed  to  the  blank  Privacy  Act  Statement 
format  since  It  may  be  confused  with  the 
applicable  form  number  entered  In  the  space 
provided  In  the  lower  left  hand  corner. 

3.  When  referencing  a  specific  approved 
Privacy  Act  Statement,  It  will  be  referred  to 
by  the  related  form  number  followed  by  the 
words  “Privacy  Act  Statement".  For  example. 
If  DSA  Form  0000  Is  entered  In  the  lower 
left  corner  of  the  Statement,  the  Statement 
will  thereafter  be  referred  to  as  DSA  Form 
0000-Privacy  Act  Statement.  This  will  facil¬ 
itate  the  requisitioning  of  supplies  of  the 
filled-in  printed  Statement  and  for  making 
references  in  correspondence. 

4.  Strict  attention  Is  invited  to  item  num¬ 
ber  1  on  the  Statement,  “Authority”.  This 
item,  when  completed,  must  be  coordinated 
with  Counsel  for  validation.  The  entry  In  the 
“Authority  block  must  be  a  “Statute"  or 
“Executive  Order”.  When  a  SSN  Is  requested. 
In  addition  to  other  items  of  personal  In¬ 
formation,  the  authority  for  requesting  the 
SSN,  if  different  from  the  authority  for  the 
other  Items,  will  also  be  shown  In  this 
block.  When  a  SSN  Is  the  only  personal  In¬ 
formation  requested,  only  item  numbers  1,  3, 
and  4  of  the  Privacy  Act  Statement  apply. 

5.  A  supply  of  blank  “Privacy  Act  State¬ 
ments"  will  be  maintained  by  the  local  forms 
management  office  for  Issuance  on  request 
from  functional  staff  elements.  PLFAs  will 
locally  reproduce  future  needs  of  the  blank 
statement.  HQ  DSA  and  DSASC  staff  ele¬ 
ments  will  obtain  additional  supplies  from 
DSAH-XA. 

6.  Completed  and  officially  approved  state¬ 
ments  applicable  to  DD,  DSA.  DSAH,  and 
DSO  forms  will  be  processed  for  Initial  dis¬ 
tribution  in  accordance  with  Information 
contained  In  block  9  of  DSA  Form  1424,  Re¬ 
quest  for  Processing  Privacy  Act  Statement. 
HQ  DSA  and  DSASC  staff  elements  can  ob¬ 
tain  additional  copies  from  D6ASC-PD. 
Completed  statements  applicable  to  DD  and 
DSA  forms  will  be  initially  distributed  to 
PLFAs,  who  will  redistribute  needs  to  sub¬ 
ordinate  echelons.  PLFAs  will  locally  repro¬ 
duce  additional  needs.  PLFAs  will  develop 
local  procedures  for  printing  and  distributing 
supplies  of  completed  and  approved  Pri¬ 
vacy  Act  Statements  applicable  to  locally 
designated  and  controlled  forms. 

7.  DSA  Form  1424,  will  be  prepared  by 
functional  elements  responsible  for  each 
statement.  It  will  serve  as  a  source  document 
for  preparing  a  requisition  far  reproduction 
and  distribution  of  the  approved  completed 
statement  to  all  users  of  the  form  to  which 
It  Is  applicable.  The  forms  management 
office  will  be  the  source  of  supply  for  blank 
copies  of  DSA  Form  1424. 

8.  HQ  DSA  and  FLFA  forms  management 
offices  will  maintain  a  file  on  each  approved 
Privacy  Act  Statement  along  with  a  copy  of 
the  supporting  DSA  Form  1424,  DD  Form 
843,  Requisition  for  Printing  and  Binding 
Service,  and  DD  Form  844,  Requisition  for 
Local  Duplicating  Service.  The  method  of 
filing  Is  left  to  the  discretion  of  local  forms 
management  officers. 

[FR  Doc.75-21954  Filed  8-19-75;8:45  am] 


Department  of  the  Air  Force 
[32  CFR  Part  806b] 

PRIVACY  ACT  OF  1974 
Notice  of  Proposed  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (Pub.  L.  93-579;  88  Stat.  1896,  (5 
U.S.C.  552a)  which  requires  each  Fed¬ 
eral  Agency  that  maintains  any  system 
of  records  as  defined  In  the  statute  to 
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promulgate  rules  pursuant  to  the  provi¬ 
sions  of  the  Act. 

Notice  is  hereby  given  that  the  De¬ 
partment  of  the  Air  Force  proposes  to 
add  to  32  CFR  Part  806,  New  Part  806b, 
Subparts  A  through  H,  to  implement  the 
provisions  of  the  Privacy  Act  of  1974. 
Subparts  A  through  G  establish  a  pro¬ 
posed  regulation  for  the  protection  of 
personal  privacy  of  individuals  identified 
in  records  maintained  by  the  Depart¬ 
ment  of  the  Air  Force.  Significant  por¬ 
tions  of  this  part  provide  the  procedures 
for  requests  for  information,  access  to 
and  disclosure  of  records  in  a  system  of 
records,  and  the  actions  taken  by  the 
Department  of  the  Air  Force  in  response 
to  such  requests.  The  part  further  con¬ 
tains  provisions  for  accounting  of  dis¬ 
closures  made,  and  requests  for  amend¬ 
ment  of  a  record  and  appeal  from  re¬ 
fusal  to  amend  a  record. 

In  addition,  sections  5  U.S.C.  552a(j) 
and  (k)  authorize  an  agency  head  to 
exempt  certain  systems  of  records  or 
parts  of  certain  systems  from  some  of  the 
requirements  of  the  Act.  The  part  re¬ 
serves  to  the  Secretary  of  the  Air  Force, 
as  head  of  an  agency,  the  right  to 
promulgate  exemptions  pursuant  to  the 
exemption  provisions  of  the  Act.  Sub¬ 
part  H  contains  those  general  and 
specific  exemptions  proposed  by  the  De¬ 
partment  of  the  Air  Force. 

The  Secretary  of  the  Air  Force  pro¬ 
poses  to  designate  the  systems  of  records 
listed  in  §§  806b.57  and  806b.58  of  Sub- 
part  H  maintained  by  the  Department  of 
the  Air  Force  for  exemptions  under  the 
specified  provisions  of  the  Privacy  Act  of 
1974  (Pub.  L.  93-579). 

Any  person  interested  in  the  rules  pro¬ 
posed  herein  may  participate  in  this  pro¬ 
posed  rulemaking  by  submitting  either 
in  person  or  through  the  mail,  written 
data,  views,  or  arguments  to  the  Director 
of  Administration,  Headquarters  United 
States  Air  Force  (AF/DA) ,  Room  5A266, 
Pentagon  Building,  Washington,  D.C. 
20330,  on  or  before  September  25, 1975. 

This  proposal  will  apply  to  other  pos¬ 
sible  systems  of  record  set  up  in  the 
future,  as  applicable. 

Therefore,  pursuant  to  5  U.S.C.  553, 
subsections  3  and  4  of  the  Administra¬ 
tive  Procedure  Act,  and  pursuant  to  5 
U.S.C.  552 A,  the  Privacy  Act  of  1974, 
Title  32  of  the  Code  of  Federal  Regula¬ 
tions  Part  806b  is  proposed. 


PART  806b— PRIVACY  ACT  OF  1974 

Subpart  A — General  Information 

Sec. 

806b. 1  Air  Force  Policy. 

806b.2  Air  Force  Supplements. 

806b  .3  Terms  Explained. 

806b  .4  Responsibilities  Assigned. 

806b  .6  Delegation  of  Authority. 

806b .6  Judicial  Sanctions. 

806b  .7  How  to  Prepare  the  Annual  Report. 

806b  .8  Making  Changes  to  Manual,  Auto¬ 
mated,  and  Microform  Systems  of 
Records. 

Subpart  B — Access  by  the  Individual 

806b  .9  Specific  Policies  Governing  Re¬ 
quests  for  Air  Force  Systems  of 
Records. 

806b. 10  Requests  To  Determine  the  Exist¬ 
ence  of  Records. 


Sec. 

806b. 11  Requests  For  Access  to  Personal 
Record  Data. 

806b  .12  Verifying  Identity  of  Individual. 

806b. 13  Denial  of  Access. 

806b. 14  Time  Limit  for  Granting  or  Deny¬ 
ing  Access. 

806b.  15  Requests  for  Amendment  of  Rec¬ 
ords. 

806b. 16  Acknowledgment  of  Amendment 
Requests. 

806b. 17  Amendment  of  Records. 

806b. 18  Review  of  Initial  Refusals. 

806b. 19  Statements  of  Disagreement. 

806b. 20  Methods  of  Amending  Records, 

806b.21  Privacy  Case  Files. 

806b  .22  Air  Force  Privacy  Board  for  Review¬ 
ing  Initial  Refusals. 

Subpart  C — Disclosure  of  Personal  Information 
to  Other  Agencies  and  Individuals 

806b.23  General  Information. 

806b.24  Conditions  of  Disclosure. 

806b  .25  Requests  for  Disclosure  Received 
Under  the  Freedom  of  Informa¬ 
tion  Act. 

806b .26  Accounting  of  Disclosures. 

806b. 27  Names  and  Addresses. 

806b .2 8  Processing  Telephone  Requests  for 
Disclosure  of  Personal  Record 
Data. 

Subpart  D — Collection  of  Personal  Information 
From  Individuals 

806b.29  Collection  Directly  From  the  Indi¬ 
vidual. 

806b.30  Informing  Individuals  From  Whom 
Information  Is  Requested. 

806b. 31  Forms  in  Use  Prior  to  September  27, 
1975. 

806b.32  Forms  Initiated  or  Revised  On  and 
After  September  27,  1976. 

806b. 33  Processing  a  Form  That  Solicits 
Personal  Information. 

806b.34  Effect  of  the  Privacy  Act  of  1974  on 
Publications. 

806b.35  Requesting  an  Individual's  Social 
Security  Number  (SSN). 

Subpart  E — Systems  of  Records 

806b  .36  General  Policies. 

806b  .37  Record  System  Notices,  RCS:  DD- 
A(  A)  1379. 

806b  .38  Report  of  New  Systems  of  Records 
That  Require  Advance  Public  No¬ 
tice,  RCS:  DD-A(A)  1379. 

806b  .39  Changes  To  Existing  Systems  Not 
Requiring  Advance  Public  Notice. 

806b  .40  Standards  of  Accuracy. 

806b  .41  Restriction  on  Maintenance  of  Cer¬ 
tain  Records. 

806b. 42  Rules  of  Conduct. 

806b  .43  Safeguarding  Personal  Information 
in  Records  Systems. 

Subpart  F — Exemptions 

806b  .44  General  Procedure. 

806b.45  General  Exemptions. 

806b -46  Specific  Exemptions. 

806b  .47  Exempted  Records  in  Nonexempted 
Systems  of  Records. 

806b. 48  Submission  Instructions. 

Subpart  G — Figures 

806b.49  Figure  1,  Instructions  for  Complet¬ 
ing  AF  Form  1606,  Register  of 
Forms  Affected  by  Privacy  Act. 

806b  .50  Figure  2,  Instructions  for  Complet¬ 
ing  AF  Form  1607,  Privacy  Act 
Statement. 

806b. 51  Figure  3,  Preparing  an  AF  Form 
- ,  Accounting  of  Disclo¬ 
sures. 

806b. 52  Figure  4,  General  Exemption  For¬ 
mat. 

806b. 53  Figure  5,  Specific  Exemption  For¬ 
mat. 

806b. 54  Figure  6,  Sample  System  Notice. 


Subpart  H — Appendices 

Sec. 

806b.55  Instructions  for  Preparation  of 
Record  System  Notices. 

806b. 56  Report  on  New  Systems  Which  Re¬ 
quire  Public  Notice,  RCS:  DD- 
A(  A)  1379. 

806b  .57  General  Exemption  Notices. 

806b.58  Specific  Exemption  Notices. 

Authority:  Pub.  L.  93-579  (6  U.S.C.  552a). 

Subpart  A — General  Information 
§  806b.  1  Air  Force  Policy. 

(a)  To  protect  individuals  from  un¬ 
warranted  invasion  of  their  personal 
privacy. 

(b)  To  permit  individuals  to: 

(1)  Know  what  records  pertaining  to 
them  are  collected,  maintained,  used,  or 
disseminated  by  the  Department  of  the 
Air  Force. 

(2)  Have  access  to  and  a  copy  of  all  or 
any  portion  of  their  records  in  a  format 
easily  understandable  to  them. 

(3)  Correct  or  amend  their  records. 

(c)  To  collect,  maintain,  use,  or  dis¬ 
seminate  any  record  of  identifiable  per¬ 
sonal  information  only  for  necessary  and 
lawful  purposes. 

(d)  To  ensure  that  Information  is 
timely  and  accurate  for  Its  Intended  use 
and  adequately  safeguarded  to  prevent 
misuse  and  unauthorized  disclosure. 

§  806b  .2  Air  Force  Supplements. 

Commands  are  not  to  change,  through 
supplements  or  other  publications,  the 
basic  policies  or  procedures  prescribed  in 
this  part.  Forward  two  printed  copies  of 
each  major  command  or  separate  operat¬ 
ing  agency  publication  that  implements 
this  directive  to  Headquarters,  United 
States  Air  Force,  Documentation  Sys¬ 
tems  Division,  (HQ  USAF/DAD) ,  Wash¬ 
ington,  D.C.  20330.  A  copy  of  each  imple¬ 
menting  directive  issued  below  command 
level  will  be  forwarded  to  the  parent 
command/DAD. 

§  806b. 3  Terms  Explained. 

(a)  Forms.  The  term  forms  includes 
not  only  forms  In  the  limited  sense  (pre¬ 
printed  documents  with  spaces  for  re¬ 
cording  information)  but  also  any  docu¬ 
ment  including  letters,  post  cards,  for¬ 
mats,  questionnaires,  surveys,  reports, 
and  memorandums,  printed  or  otherwise 
reproduced  with  space  for  filling  in  per¬ 
sonal  information,  descriptional  personal 
material,  addresses,  or  answers. 

(b)  Individual.  A  citizen  of  the  United 
States  or  an  alien  lawfully  admitted  for 
permanent  residence.  Where  a  system  of 
records  covers  both  citizens  and  non¬ 
resident  aliens,  only  that  portion  which 
relates  to  citizens  or  resident  aliens  is 
subject  to  the  Act  but  Air  Force  activi¬ 
ties  are  encouraged  to  treat  such  systems 
as  if  they  were  in  their  entirety,  subject 
to  the  act. 

Note:  A  legal  guardian  or  the  parent  of  a 
minor  has  the  same  rights  as  the  Individual 
and  may  act  on  behalf  of  the  Individual. 

(c)  Maintain.  The  collection,  use, 
maintenance,  and  dissemination  of  rec¬ 
ords.  This  refers  to  recordkeeping  tasks 
as  well  as  control  over  and  accountability 
for  systems  of  records. 
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<d)  Official  use.  Within  thte  context  of 
this  part,  this  term  encompasses  those 
instances  in  which  o facials  and  employees 
of  the  Air  Force  have  a  demonstrated 
need  for  access  to  any  record  In  the  per¬ 
formance  of  their  official  duties,  subject 
to  parts  which  govern  access  to  classified 
information. 

<e)  Record.  Any  item,  collection,  or 
grouping  of  information  about  individ¬ 
uals  that  is  maintained  by  an  Air  Force 
activity,  including,  but  not  limited  to: 
education,  financial  transactions,  medi¬ 
cal  histories:  and  criminal  or  employ¬ 
ment  histories  that  contain  their  names, 
or  the  identifying  numbers,  symbols,  or 
other  particulars  assigned  to  individuals, 
such  as  finger  or  voice  prints  or  photo¬ 
graphs. 

(f)  Routine  use.  With  respect  to  the 
disclosure  of  a  record,  the  use  of  such 
record  for  a  purpose  which  is  compatible 
with  the  purpose  for  which  it  was  col¬ 
lected.  Routine  use  encompasses  the  spe¬ 
cific  ways  or  processes  in  which  the  in¬ 
formation  is  used,  including  the  persons 
or  organizations  to  whom  the  record  may 
be  disclosed,  even  if  such  use  occurs 
infrequently. 

(g)  Statistical  record.  A  record  in  a 
system  of  records  maintained  for  sta¬ 
tistical  research  or  reporting  purposes 
only  and  not  used  in  any  manner  in 
making  decisions  about  the  rights,  bene¬ 
fits,  or  entitlements  of  an  individual. 

(h)  Systems  manager.  The  chief  of  a 
staff  office  at  each  echelon  of  command, 
the  head  of  a  major  staff  function  within 
a  headquarters  (deputies,  directors,  and 
comparable  officials,  etc.),  and  com¬ 
manders  who: 

(1)  By  Air  Force  regulation  or  other 
issuance,  prescribe  the  establishment  and 
maintenance  of  an  Air  Force-wide  sys¬ 
tem  of  records,  or  a  function  or  process 
which  results  in  the  establishment  of  an 
Air  Force- wide  system  of  records. 

(2)  By  regulation  or  other  issuance, 
prescribe  the  establishment  and  mainte¬ 
nance  of  a  command,  activity,  staff  office, 
or  installation-unique  system  of  records, 
or  prescribe  a  function  or  process  which 
results  in  the  establishment  of  such  a 
system  of  records.. 

(i)  System  of  records.  A  group  of  any 
records  maintained  by  any  Air  Force  ac¬ 
tivity  or  Air  Force  records  maintained  by 
a  contractor  in  which  information  is  as 
distinguished  from  can  be  retrieved  by  a 
person’s  name  or  by  some  identifying 
number,  symbol,  or  other  particular  as¬ 
signed  to  the  individual. 

Note:  A  grouping  of  a  series  of  records  ar¬ 
ranged  chronologically  or  subjectively  which 
is  not  retrieved  by  Individual  Identifier,  la  not 
a  system  of  records  as  explained  herein,  even 
if  Individual  Information  could  be  retrieved 
by  the  Identifier  through  case  or  paper-by¬ 
paper  search. 

(j)  Terms  used  in  completing  record 
systems  notices.  See  §  806b.55,  Instruc¬ 
tions  for  Preparation  of  Record  System 
Notices. 

(k)  Workday.  All  duty  days  excluding 
Saturday,  Sunday,  and  all  legal  Federal 
holidays. 


§  806b.  1  Responsibilities  Assigned. 

(a)  Administrative  Assistant  to  the 
Secretary  of  the  Air  Force  ( SAF/AA ). 
Implements  and  complies  with  the  statu¬ 
tory  provisions  of  the  Privacy  Act  within 
the  Air  Force.  This  official  is  also  the 
final  decision  authority  on  appeal  actions 
(see  §  806b. 5(a) ). 

(b)  Director  of  Administration,  HQ 
USAF.  Manages  and  administers  the  Air 
Force  Privacy  Act  program.  The  Docu¬ 
mentation  Systems  Division  (HQ  USAF/ 
DAD)  is  designated  as  the  Air  Force  Pri¬ 
vacy  Act  office  and  is  responsible  for  en¬ 
suring  that  the  necessary  actions  are 
accomplished. 

(c)  HQ  USAF  Deputy  Chiefs  of  Staff 
(DCS),  and  Comparable  Officials  and 
SAF  Offices.  Ensure  compliance  with  this 
regulation  within  their  deputates  and 
staff  offices  and  designate  a  Privacy  Offi¬ 
cer  to  assume  the  responsibilities  in  para¬ 
graph  (h)  of  this  section. 

(d)  Commanders  of  Major  Commands 
(MAJCOMs)  and  Separate  Operating 
Agencies  (SO As).  Implement  this  reg¬ 
ulation  within  their  commands  and  en¬ 
sure  compliance  with  its  provisions  com¬ 
mand-wide. 

(e)  MAJCOM  and  SOA  Directors  of 
Administration.  Monitor  and  administer 
the  command-wide  program.  These  re¬ 
sponsibilities  may  be  delegated  to  another 
staff  function  if  approved  by  HQ  USAF/ 
DA.  Accordingly,  the  Director  of  Admin¬ 
istration  designates  a  command  Privacy 
Act  Officer  within  the  DAD  staff  function, 
and  a  Privacy  Officer  at  each  installa¬ 
tion  for  each  activity  exercising  general 
court  martial  jurisdiction,  with  responsi¬ 
bilities  outlined  in  S  806b. 4  subpara¬ 
graphs  (g)  and  (h)  below.  Furnish  HQ 
USAF/DAD  in  writing,  the  name,  grade 
or  rank,  and  telephone  number  of  the 
Command  Privacy  Act  Officer,  includ¬ 
ing  all  future  changes. 

„Note:  Privacy  Act  monitors  may  be  desig¬ 
nated  at  such  subordinate  organizations  and 
staff  elements  as  necessary. 

(f)  Record  System  Managers.  Ensure 
response  to  requests  for  information 
from  individuals  and  other  sources; 
maintain  an  accountability  record  of 
disclosures  of  information,  which  pro¬ 
vide  data  needed  to  prepare  the  annual 
report  to  the  Privacy  Officer;  submit  to 
the  Privacy  Officer  systems  notices  for 
existing,  changed,  and  proposed  record 
systems  which  are  within  the  purview  of 
this  part  and  conduct  the  initial  and 
annual  review  and  evaluation  of  record 
systems  in  accordance  with  Subpart  E 
of  this  part. 

(g)  Command  Privacy  Act  Officer: 

(1)  Serves  as  the  primary  point  of 
contact  within  the  command  on  all  Pri¬ 
vacy  Act  matters. 

(2)  Ensures  that  appropriate  com¬ 
mand  personnel  are  trained  or  oriented 
in  the  provisions  of  the  act. 

(3)  Develops  the  command  supple¬ 
ment  to  this  part,  as  required. 

(4)  Compiles  material  for  the  annual 
report,  and  record  system  notices  or 
changes  thereto  for  submission  to  HQ 
USAF/DAD. 


(5)  Monitors  accuracy  and  complete¬ 
ness  of  records  contained  in  systems  of 
records. 

(h)  Privacy  Officer: 

(1)  Acts  as  liaison  between  the  Pri¬ 
vacy  Act  Officer  and  individual  respon¬ 
sible  for  systems  of  records. 

(2)  Implements,  administers,  and 
monitors  the  Privacy  Act  program  with¬ 
in  his  or  her  area  of  jurisdiction. 

(3)  Assures  that  personnel  are 
trained. 

(4)  Compiles  material  for  the  annual 
report,  and  record  system  notices  for 
submission  to  the  command  Privacy  Act 
Officer. 

§  806b. 5  Delegation  of  Authority. 

(a)  The  Administrative  Assistant  to 
the  Secretary  of  the  Air  Force  (SAF/ 
AA)  is  the  final  decision  authority  on 
appeal  actions. 

(b)  Denial  Authorities.  The  authority 
to  deny  the  disclosure  of  records  to  the 
public  will  not  be  delegated  to  a  lower 
level  than  those  specified  below  unless 
approved  by  SAF/AA.  Submit  requests 
for  waiver  to  denial  authorities  stated 
herein,  with  justification,  to  HQ  USAF/ 
DAD.  Only  the  following  officials  or  their 
designees,  have  the  authority  to  deny  the 
release  of  records: 

(1)  Deputy  chiefs  of  staff  and  chiefs 
of  comparable  offices  or  higher  level  at 
SAF  or  HQ  USAF. 

(2)  Commanders  of  major  commands 
or  of  separate  operating  agencies  of  the 
Air  Force.  These  denial  authorities 
should,  however,  consult  with  the  Staff 
Judge  Advocate,  or  with  General  Coun¬ 
sel  in  OSAF,  before  making  a  determi¬ 
nation  to  deny,  or  partially  deny,  a  re¬ 
quest  from  the  disclosure  of  records. 

(c)  Disclosure  Authorities : 

(1)  The  person  or  official  named  in 
the  record  system  notice  published  in 
the  Federal  Register  as  the  individual 
to  whom  the  request  is  to  be  addressed. 

(2)  The  System  Manager  as  named  in 
the  Federal  Register. 

(3)  If  the  disclosure  authority  cannot 
be  determined  for  a  specified  system  of 
records  to  which  an  individual  requests 
access,  send  the  request  to  HQ  USAF/ 
DAD. 

(d)  The  Commander,  Air  Force  Office 
of  Special  Investigation  (AFOSI) ;  the 
Chief  of  Security  Police;  Base  Chiefs  of 
Security  Police;  AFOSI  District  Com¬ 
manders.  These  individuals  and  their 
designees  are  delegated  the  authority  to 
request  records  from  other  agencies  for 
law  enforcement  activities  in  accordance 
with  5  U.S.C.  552a(b)  (7) .  All  such  re¬ 
quests  must  be  in  writing  indicating  the 
particular  portion  of  the  record  desired 
and  the  law  enforcement  activity  that 
is  requesting  the  record.  A  copy  of  the 
requests  will  be  filed  with  the  appropriate 
AFOSI  or  Security  Police  office. 

§  806b. 6  Judicial  Sanctions. 

(a)  Individuals  may  have  a  civil  cause 
of  action  against  the  Department  of  the 
Air  Force  when  Air  Force  officials: 

(1)  Deny  a  request  to  amend  a  record, 
or  do  not  respond  to  a  request  for  a  re¬ 
view  of  the  denial  within  30  days. 

4b 
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(2)  Refuse  individuals  (or  their  rep¬ 
resentatives)  access  to,  or  a  copy  of,  any 
record  or  information  in  their  possession 
pertaining  to  the  requesting  individuals, 

(3)  Pail  to  maintain  complete  and  ac¬ 
curate  personal  records,  resulting  in  an 
adverse  determination  made  concerning 
the  individual. 

(4)  Fail  to  comply  with  this  part 
thereby  adversely  affecting  an  individ¬ 
ual. 

(b)  Individuals  may  seek  redress  by 
filing  a  complaint  in  the  United  States 
District  Court  in: 

(1)  The  district  where  they  reside  or 
have  their  principal  place  of  business. 

(2)  The  district  in  which  the  records 
are  situated. 

(3)  The  District  of  Columbia. 

The  complaint  must  be  filed  within  two 
years  after  the  individual  first  acquired 
a  cause  of  action  under  the  provisions 
of  this  regulation,  unless  willful  misin¬ 
terpretations  have  been  made  by  Air 
Force  officials.  If  the  latter  is  the  case, 
complaint  must  be  filed  within  two  years 
after  discovery  of  the  misinterpretations. 

(c)  Any  officer  or  employee  who  will¬ 
fully  discloses  individually  identifiable 
information  to  one  not  entitled  to  receive 
it;  maintains  a  system  of  records  without 
first  publishing  it  in  the  Federal  Register; 
or  any  person  who  knowingly  obtains  a 
record  pertaining  to  an  individual  under 
false  pretenses  may  be  guilty  of  a  mis¬ 
demeanor  and  fined  not  more  than  $5,000. 

§  806b. 7  How  to  prepare  the  annual 
report. 

Each  MAJCOM/SOA  Privacy  Act  Offi¬ 
cer,  and  Office  of  the  Secretary  of  the 
Air  Force/HQ  USAF  Privacy  Officer  at 
deputate  (or  comparable)  level  compiles 
and  prepares  the  report  for  his  or  her 
respective  office  or  command.  Submit  the 
report  in  duplicate  to  reach  HQ  USAF/ 
DAD  by  March  1  of  each  calendar  year. 
The  Report  Control  Symbol  is  DD-A  (A) 
1379,  and  the  report  period  is  January  1 
to  December  31  of  each  year.  The  report 
must  include,  but  is  not  limited  to  the 
following: 

(a)  Summary.  Briefly  describe  the  sta¬ 
tus  of  actions  taken  to  comply  with  the 
act,  and  results;  problems  encountered, 
and  recommendations  for  any  changes 
in  legislation,  policies  or  procedures. 

(b)  Accomplishments.  Summarize  ma¬ 
jor  accomplishments  such  as  improve¬ 
ments  in  information  practices  and  safe¬ 
guards. 

(c)  Plans.  Describe  major  plans  or 
programs  for  Privacy  Act  activities  in  the 
upcoming  year  such  as  area  of  emphasis, 
additional  securing  of  facilities  planned, 
staff  visits  to  subordinate  elements,  etc. 

(d)  Exemptions.  List  systems  of  rec¬ 
ords  which  are  exempted  during  the  year, 
the  number  of  records  in  each  system  ex¬ 
empted  from  each  specific  provision,  and 
the  reasons  for  the  exemption.  (Refer  to 
Subpart  F  of  this  part  for  the  specific 
provisions  under  which  an  exemption  is 
authorized.) 

(e)  Number  of  Systems.  Indicate  the 
number  of  systems  of  records  changed, 
the  number  of  new  systems  created,  and 
the  reasons;  for  example,  elimination  of 


all  or  portions  of  systems  of  records  and 
any  reduction  in  the  number  of  indi¬ 
viduals  on  whom  records  are  maintained. 

(f)  Requests  To  Amend  Records.  The 
number  of  cases  on  which  the  System 
Manager  or  office  of  custody  was  unable 
to  act  within  30  workdays. 

(g)  Operational  Experiences.  Provide 
a  general  description  of  operational  ex¬ 
periences  and  for  each  system  of  records 
(in  relation  to  the  total  number  of  rec¬ 
ords  in  the  system),  an  estimate  of  the 
number  of  individuals  who: 

(1)  Requested  information  on  the 
existence  of  records  pertaining  to  them. 

(2)  Refused  to  provide  information. 

(3)  Requested  access  to  their  records. 

(4)  Appealed  initial  refusals  to  amend 
records. 

(5)  Sought  redress  through  the  courts. 

(h)  Costs.  Provide  the  actual  or  esti¬ 
mated  cost  of  implementing  this  Part  and 
administering  its  provisions.  Items  of  ex¬ 
pense  should  include  but  are  not  limited 
to  the  following: 

(1)  Developmental:  Records  system 
redesign  to  accommodate  Privacy  Act  re¬ 
quirements;  acquisition  of  equipment, 
facilities,  and  personnel,  etc.;  publica¬ 
tions  and  forms  development  (and  other 
instructions)  to  include  printing  and 
distribution  costs;  for  forms,  provide  the 
following: 

(i)  Number  of  forms  for  which  a  Pri¬ 
vacy  Act  statement  was  issued. 

(ii)  Total  costs  Incurred  in  developing, 
collecting,  processing,  transmitting,  and 
using  information  required. 

(2)  Operational:  Manpower  and  equip¬ 
ment  costs  incurred  in  collecting,  consoli¬ 
dating,  preparing,  reproducing,  and  dis¬ 
tributing  reports  prescribed;  manipulat¬ 
ing  information  gathered  into  the  desired 
structure  or  format  for  data  processing 
purposes;  transportation  and  per  diem 
expenses  for  staff  visits  to  subordinate 
units,  etc. 

§  806b. 8  Making  Changes  to  Manual, 
Automated,  and  Microform  Systems 
of  Records. 

(a)  Manual  Systems  of  Records.  Make 
changes  directly  in  the  record.  Maintain 
necessary  support  documents  such  as 
statements  of  disagreement,  justifica¬ 
tions  for  refusal  to  amend  records,  and 
the  accounting  of  disclosures  with  the 
record  file  or  as  part  of  a  Privacy  Case 
file  (see  §  806b.21). 

(b)  Automated  Systems  of  Records. 
Make  changes  directly  in  the  record.  If 
this  is  not  possible,  flag  the  record  to  in¬ 
dicate  the  existence  and  location  of  the 
change;  that  is,  file  folder,  etc.  Also,  con¬ 
sider  coding  the  record  to  indicate  the 
existence  and  location  of  the  statement 
of  disagreement,  justification  for  refusal 
to  amend  record,  and  the  accounting  of 
disclosures,  as  applicable. 

(c)  Microform  Systems  of  Record:  (1) 
Change  the  record,  when  feasible  (roll 
film,  cartridges,  microfiche  jackets,  low 
reduction  microfiche) ,  by  splicing  or 
otherwise  inserting  information  into  the 
record.  If  substitution  is  not  feasible,  for 
example  in  microfiche,  there  are  two  al¬ 
ternatives: 


(1)  Attach  a  new  fiche,  with  updated 
information,  to  the  original. 

(ii)  Flag  original  fiche  to  indicate  ex¬ 
istence  and  location  of  supplementary  in¬ 
formation.  In  cases  where  deletion  or  ob¬ 
literation  is  impractical,  as  with  high- 
reduction  microfiche,  reconstruct  or  flag 
the  fiche  in  a  manner  which  makes  access 
unlikely  without  consulting  the  correct 
supplementary  information: 

(2)  Add  statements  of  disagreement  or 
additional  information  to  the  record  by 
flagging  the  record  to  indicate  the  exist¬ 
ence  and  location  of  this  information  in 
files. 

Subpart  B — Access  by  the  Individual 

§  806b. 9  Specific  Policies  Governing 
Requests  for  Air  Force  Systems  of 
Records. 

(a)  Requests  for  access  received  by  any 
Air  Force  activity  maintaining  a  system 
of  records: 

(1)  Will  not  be  denied  solely  because 
the  record’s  physical  presence  is  not 
readily  available  (that  is,  on  computer  or 
on  magnetic  tape)  or  because  the  con¬ 
text  of  the  record  may  disclose  sensitive 
information  about  another  individual.  To 
protect  the  personal  privacy  of  other  in¬ 
dividuals  who  may  be  identified  in  a  rec¬ 
ord,  prepare  an  extract  deleting  only  that 
information  which  would  not  be  released 
to  the  individual  under  32  CFR  806. 

(2)  May  not  be  denied  because  those 
records  are  exempted  from  disclosure  un¬ 
der  the  provisions  of  32  CFR  806. 

(3)  Concerning  a  medical  record,  will 
be  disclosed  to  the  individual  to  whom  it 
pertains  unless,  in  the  judgment  of  a 
physician,  access  could  have  an  adverse 
effect  upon  the  individual’s  physical  or 
mental  health.  When  it  has  been  deter¬ 
mined  that  the  disclosure  of  medical  in¬ 
formation  could  have  an  adverse  effect 
upon  the  individual  to  whom  it  pertains, 
the  information  may  be  transmitted  to  a 
physician  named  by  the  requesting  indi¬ 
vidual. 

(4)  Must  be  reasonably  specific  in 
identifying  the  record  in  a  system  of  rec¬ 
ords.  Normally,  blanket  requests  by  in¬ 
dividuals  for  all  records  pertaining  to 
them  will  not  be  honored.  Instead,  the 
individuals  should  be  asked  to  identify 
the  specific  record  or  records  to  which 
they  are  seeking  access. 

(5)  Must  be  in  existence  at  the  time 
of  the  request;  that  is,  there  is  no  obliga¬ 
tion  to  create  a  record  to  satisfy  a  re¬ 
quest  for  personal  record  data.  However, 
if  portions  of  the  data  being  requested 
exist  in  the  form  of  several  records  at 
different  locations,  the  information  may 
be  consolidated  by  the  activity  that  ini¬ 
tially  received  the  request.  If  gathering 
the  information  would  involve  excessive 
administrative  costs,  the  individual 
should  be  referred  to  the  sources  at  those 
locations  where  these  data  are  main¬ 
tained. 

(6)  Will  be  processed  expeditiously 
and  as  stated  in  this  regulation.  Every 
effort  will  be  made  to  assist  the  individual 
seeking  knowledge  of  or  access  to  his/her 
record 

(7)  Will  be  processed  as  stated  herein 
and  32  CFR  952,  if  they  involve  investi- 
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gative  reports  compiled  by  the  Air  Force 
Office  of  Special  Investigations  (AFOSI) 
and  other  investigative  offices.  (Investi¬ 
gatory  records  compiled  by  any  investi¬ 
gative  organization  which  are  in  the 
temporary  custody  of  an  organization 
for  purposes  of  adjudication  or  other 
personnel  action  are  the  records  of  the 
originating  investigative  organization.) 
Individuals  will  be  directed  to  the  origi¬ 
nating  investigative  organization  and  in¬ 
structed  to  direct  all  requests  to  that 
organization.  Records  concerning  the 
adjudication,  or  other  personnel  actions 
based  on  the  investigative  records,  origi¬ 
nated  by  the  organization  using  the  in¬ 
vestigation,  are  the  records  of  the  using 
organization  which  will  respond  to  all 
other  requests  concerning  them. 

(8)  Will  be  processed  as  prescribed  in 
this  Part,  even  if  the  request  was  for¬ 
warded  under  the  Freedom  of  Informa¬ 
tion  Act.  Requests  for  access  to  records 
must  be  acknowledged  within  ten  work¬ 
days  of  receipt  and  access  provided 
within  30  workdays.  When  the  transfer 
of  action  from  one  office  to  another  is 
necessary,  it  will  be  made  within  two 
workdays;  the  office  receiving  the  action 
will  acknowledge  receipt  to  the  re¬ 
quester  within  the  remaining  eight  work¬ 
days.  In  unusual  circumstances,  the 
command  Privacy  Act  Officer  or  HQ 
USAF/OSAF  Privacy  Officer  may  author¬ 
ize  an  extension  of  the  time  limit  for 
processing  a  request,  by  giving  written 
notice  to  the  requester,  explaining  the 
reason  for  the  extension,  and  indicating 
the  date  on  which  a  notice  of  determina¬ 
tion  is  expected  to  be  dispatched.  Copies 
of  this  written  notice  must  be  sent  to 
the  next  higher  command  with  informa¬ 
tion  copies  to  HQ  USAF/Litigation  Divi¬ 
sion,  Office  of  the  Judge  Advocate 
( JACL) ,  and  DAD,  Washington,  D.C. 
20330. 

(9)  Which  are  not  included  in  a  sys¬ 
tem  of  records  will  be  processed  in  ac¬ 
cordance  with  32  CFR  806. 

(b)  This  part  does  not  entitle  an  in¬ 
dividual  to  any  information  compiled  in 
reasonable  anticipation  of  a  civil  action 
or  proceeding. 

§  806b.l0  Requests  To  Determine  the 
Existence  of  Records. 

(a)  Individuals  who  seek  knowledge  of 
whether  a  system  of  records  pertaining 
to  them  is  maintained  by  the  Air  Force 
should: 

(1)  Consult  the  Air  Force  systems  no¬ 
tices  published  in  the  Federal  Register 
to  identify  the  system (s)  of  records  they 
are  seeking. 

(2)  Determine  the  organizational  ele¬ 
ment  that  should  have  custody  of 
records  pertaining  to  them,  from  the  sys¬ 
tem  notices  or  a  knowledge  of  their 
previous  association  with  the  Air  Force 
(as  a  member,  civilian  employee,  depend¬ 
ent,  or  other) . 

(3)  Submit  a  request  to  the  organiza¬ 
tional  element(s)  likely  to  have  custody 
of  the  records,  or  to  the  System  Manager 
Identified  in  the  applicable  systems  no¬ 
tice.  Individuals  should  be  aware  that 
they  may  need  to  provide  certain  per¬ 
sonal  items  of  information  which  are 


specified  in  the  systems  notice  before 
any  request  for  access  to  a  record  can 
be  granted.  Such  information  is  used  to 
verify  identity  to  preclude  unauthorized 
disclosures  and  generally  includes  such 
data  as  name,  address,  etc. 

(b)  On  receipt  of  the  request,  the  of¬ 
fice  of  custodial  responsibility  for  the 
record  or  systems  manager  will  act  on 
the  request  and  will  notify  the  individual 
of  the  results  within  ten  workdays  of 
receipt  of  the  request  (see  §  806.9(a)  (8) 
about  time  extensions).  The  systems 
manager  will  also  inform  the  individual 
how  to  gain  access  to  the  records. 

§  806b.  11  Requests  for  Access  to  Per¬ 
sonal  Record  Data. 

• 

Each  Air  Force  activity  that  maintains 
systems  of  records  to  which  individuals 
request  access  must: 

(a)  Inform  the  individuals  whether  or 
not  the  system  of  records  contains  a 
record  pertaining  to  them  and  the  times 
and  places  where  they  may  review  their 
records. 

(b)  Permit  the  individuals  to  review 
their  records.  The  activity  may  require 
individuals  who  wish  to  be  accompanied 
by  another  person  when  receiving  access 
to  their  records  to  furnish  a  written 
statement  authorizing  discussion  of  the 
records  in  the  presence  of  the  accom¬ 
panying  person. 

(c)  Permit  them  to  obtain  a  copy  of 
their  records  unless  exempted  in  accord¬ 
ance  with  Subpart  F  of  this  part  and 
listed  in  §§  806b.57  and  806b.58.  The  copy 
provided  will  be  in  a  form  comprehen¬ 
sible  to  the  individuals. 

(d)  Apply  fees  specified  in  32  CFR 
806.21  when  reproducing  records  re¬ 
quested  by  individuals.  Normally,  copying 
fees  totalling  less  than  $3.00  will  be 
waived.  No  fees  will  be  charged  for  rec¬ 
ord  searches,  or  for  reproduction  when  it 
is  done  for  the  convenience  of  the  Air 
Force  or  required  in  order  to  grant 
access. 

§  806b.  12  Verifying  Identity  of  Indi¬ 
viduals. 

Individuals  will  not  be  required  to 
state  a  reason  or  otherwise  justify  their 
need  to  gain  access  to  a  record  pertain¬ 
ing  to  them.  However,  the  activity  having 
custody  of  the  record  may  require  that 
individuals  provide  reasonable  verifica¬ 
tion  of  identity  before  granting  access, 
subject  to  the  following  conditions: 

(1)  Individuals  need  not  verify  their 
identities  if  the  records  they  seek  are 
available  to  any  member  of  the  public 
under  the  Freedom  of  Information  Act. 

(2)  For  individuals  who  seek  access 
in  person,  identity  will  be  verified  by 
using  documents  they  are  likely  to  have 
readily  available  (employee  or  military 
identification  card,  driver’s  license,  or 
medical  card).  On  mail  requests,  verifi¬ 
cation  of  identity  may  consist  of  mini¬ 
mum  identifying  data,  such  as  name  and 
date  of  birth  or  similar  information.  If 
the  sensitivity  of  the  requested  data  war¬ 
rants,  a  signed  notarized  statement  of 
identity  may  be  required. 

(3)  Individuals  will  not  be  denied  ac¬ 
cess  to  their  record  for  refusing  to  dis¬ 


close  their  Social  Security  Number 
(SSN)  unless  disclosure  of  their  SSN  is 
required  by  Federal  statute  or  by  regu¬ 
lation  adopted  before  January  1, 1975. 

(4)  For  individuals  who  seek  access 
by  telephone,  identification  requirements 
must  be  reasonable  and  the  minimum 
necessary  to  grant  the  access,  such  as 
name,  date  of  birth,  etc.  Release  of  in¬ 
formation  by  this  means  may  be  at  the 
discretion  of  the  activity  having  custody 
of  the  record.  If  the  identity  of  the  caller 
is  in  question,  ask  that  the  request  for 
access  be  submitted  in  writing  or  make  a 
return  call  to  insure  the  identity  of  the 
requester. 

§  806b.  13  Denial  of  Access. 

If,  in  the  judgment  of  the  Systems 
Manager,  a  legitimate  purpose  exists  for 
denying  access,  within  five  workdays  the 
manager  will  forward  a  copy  of  the  re¬ 
quest,  together  with  a  copy  of  the  record 
involved  and  the  reason  (s)  for  recom¬ 
mending  denials  to  the  appropriate 
Denial  Authority  Identified  in  5  806b.5 
(b).  The  Systems  Manager  will  promptly 
notify  the  requesting  individual  of  the 
referral.  Only  a  Denial  Authority  is  au¬ 
thorized  to  deny  access. 

§  806b.  14  Time  Limit  for  Granting  or 
Denying  Access. 

Normally,  access  will  be  granted  or  de¬ 
nied  within  ten  workdays  of  receipt  of 
the  request  by  the  proper  office. 

§  806b.  15  Requests  for  Amendment  of 
Records. 

(a)  Individuals  have  the  right  to  re¬ 
quest  that  their  records  be  amended  by 
correction,  deletion,  addition,  or  other 
changes.  Such  requests  may  be  made 
either  in  person  or  by  mail.  Except  in  in¬ 
stances  involving  correction  of  minor  er¬ 
rors,  requests  for  amendment  will  nor¬ 
mally  be  submitted  in  writing  to  the  Sys¬ 
tem  Manager  having  physical  custody  of 
the  record.  The  request  should  contain 
sufficient  information  to  permit  identi¬ 
fication  and  location  of  the  records,  a 
description  of  the  item  or  portion  for 
which  the  amendment  is  requested,  the 
reason  why  the  amendment  is  being  re¬ 
quested  and,  if  available,  documentary 
evidence  supporting  the  requested 
amendment. 

(b)  A  request  will  not  be  rejected  or 
required  to  be  resubmitted  unless  addi¬ 
tional  information  is  essential  to  process 
it;  nor  will  incomplete  or  inaccurate  re¬ 
quests  be  rejected  categorically.  Instead, 
the  individual  will  be  asked  to  clarify  the 
request  as  needed.  An  individual  will  be 
required  to  provide  verfication  of  identi¬ 
ty  as  prescribed  in  §  806b. 12  to  ensure 
that  the  requester  is  seeking  to  amend 
records  pertaining  to  him  or  her,  not 
records  of  another  individual. 

§  806b.l6  Acknowledgment  of  Amend¬ 
ment  Requests. 

A  written  acknowledgment  identifying 
the  request  and  advising  the  individual 
when  he  or  she  may  expect  to  be  advised 
of  action  taken  must  be  provided  to  the 
individual  within  ten  workdays  after  re¬ 
ceipt  of  the  request.  No  separate  ac- 
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knowledgment  of  receipt  is  necessary  If 
the  request  can  be  approved  or  denied 
and  the  Individual  Informed  thereof 
within  the  ten-day  period.  For  requests 
presented  In  person,  a  written  acknowl¬ 
edgment  may  be  provided  at  the  time  the 
request  Is  presented.  When  practicable,  a 
decision  on  amendment  will  be  made  txi 
the  requester  within  thirty  workdays 
after  receipt  of  the  request. 

§  806b.  17  Amendment  of  Records. 

(a)  Individuals  may  formally  request 
amendment  of  any  personal  records 
maintained  by  the  Air  Force  which  re¬ 
late  to  them.  Amendments  to  records 
under  this  Part  will  be  limited  solely  to 
factual  matters.  Requests  for  retroactive 
promotion,  removal  of  disciplinary  ac¬ 
tion,  correction  or  removal  of  effective¬ 
ness  reports,  etc.,  must  be  presented  to 
the  Air  Force  Board  for  the  Correction 
of  Military  Records  or  other  appropriate 
forum  as  provided  by  Air  Force  direc¬ 
tives.  Requests  for  factual  corrections 
may  also  be  submitted  to  the  Board  for 
Correction  of  Military  Records.  System 
Managers  may  routinely  amend  records 
locally  when  documentary  evidence 
furnished  by  the  individual,  or  other¬ 
wise  available  to  the  Air  Force,  conclu¬ 
sively  demonstrates  an  error  in  fact,  or 
no  legitimate  reasons  exist  for  not 
amending  the  record.  In  these  cases,  the 
Systems  Manager  will  amend  the  record 
accordingly  and  promptly  advise  the  in¬ 
dividual.  Requests  for  amendment  which 
are  not  resolved  by  the  Systems  Manager 
will  be  forwarded  expeditiously  to  the 
appropriate  Denial  Authority  identified 
In  §  806b. 6  for  determination.  All  re¬ 
quests  for  amendment  of  military  per¬ 
sonnel  records  under  the  Privacy  Act 
will  be  forwarded  for  action  to  the  HQ 
USAF  office  of  primary  responsibility  for 
the  information  being  corrected.  Each 
request  will  be  accompanied  by  a  copy 
of  the  records  or  portions  involved. 

(b)  If  the  Denial  Authority  agrees 
with  any  portion  or  all  of  the  individual’s 
request,  he  or  she  will  promptly  advise 
the  individual  of  the  decision  and  direct 
the  System  Manager  to  amend  the  rec¬ 
ord.  After  amending  the  record,  all 
known  recipients  and  holders  of  the  rec¬ 
ord  will  be  notified  of  the  amendment 
and  directed  to  amend  their  copies. 

(c)  If  the  Denial  Authority  disagrees 
with  all  or  any  portion  of  an  amendment 
request,  he  or  she  will  promptly: 

(1)  Inform  the  individual  of  the  re¬ 
fusal  and  the  reasons  therefor. 

(2)  Advise  the  individual  that  he  or 
she  may  request  review  by  the  final  deci¬ 
sion  authority,  SAF/AA. 

(3)  Advise  the  individual  that  a  re¬ 
quest  for  further  review  should  be  ad¬ 
dressed  through  him  or  her,  so  that  all 
papers  on  the  case  can  be  assembled  for 
consideration  by  SAF/AA. 

(4)  Furnish  a  copy  of  the  refusal 
letter  to  the  Systems  Manager  possessing 
the  records. 

§  806b. 18  Review  of  Initial  Refusals. 

(a)  An  individual  may  request  a  re¬ 
view  of  the  initial  refusal  in  writing  from 
The  Secretary  of  the  Air  Force  within 
45  days  of  the  denial.  The  request  should 


be  addressed  to  The  Secretary  of  the 
Air  Force,  Office  of  the  Administrative 
Assistant  (SAF/AA),  Washington,  D.C. 
20330  and  sent  through  the  Initial  Denial 
Authority.  The  Denial  Authority  will  for¬ 
ward  to  SAF/AA  a  complete  file  consist¬ 
ing  of: 

(1)  The  request  for  review. 

(2)  The  request  for  amendment 

(3)  The  initial  refusal. 

(4)  A  copy  of  the  record  or  portions 
involved. 

(5)  Any  records  or  coordination  ac¬ 
tions  that  relate  to  the  Initial  refusal. 

(b)  If  SAF/AA  determines  that  the 
record  should  be  amended,  the  individual 
will  be  advised  promptly.  Simultaneously, 
the  appropriate  Systems  Manager  will 
be  directed,  through  the  Denial  Author¬ 
ity,  to  amend  the  records  and  direct  pre¬ 
vious  recipients  to  amend  their  copies 
{  806b. 17(b) ) . 

(c)  If,  after  conducting  the  review, 
SAF/AA  upholds  the  Denial  Authority’s 
refusal  to  amend  the  record,  the  Indi¬ 
vidual  will  be  notified  that: 

(1)  His  or  her  amendment  request  has 
been  refused  after  review,  with  reasons 
for  refusal. 

(2)  He  or  she  has  a  right  to  file  with 
the  Systems  Manager,  a  concise  state¬ 
ment  containing  reasons  why  he  or  she 
disagrees  with  the  Air  Force’s  decision. 

(3)  His  or  her  statement  will  be  a  part 
of  the  record  and  will  thus  become  avail¬ 
able  to  anyone  who  subsequently  uses  the 
record. 

(4)  Known  prior  recipients  of  the  dis¬ 
puted  record  will  be  provided  a  copy  of 
his  or  her  disagreement  statement 

(d)  A  final  determination  on  the  indi¬ 
vidual’s  request  for  review  of  an  initial 
refusal  to  amend  a  record  must  be  com¬ 
pleted  within  thirty  workdays  after  re¬ 
ceipt,  by  SAF/AA,  unless  it  is  determined 
that  a  fair  and  equitable  review  cannot 
be  completed  in  that  time.  If  additional 
time  is  required,  the  Individual  will  be 
informed  in  writing  of  the  reasons  for 
the  delay  and  of  the  date  when  the  re¬ 
sults  of  the  review  may  be  expected. 

(e)  The  procedure  established  by  this 
paragraph  is,  for  purposes  of  Air  Force 
Regulation  40-771,  “Appeal  and  Griev¬ 
ance  Procedures,”  (not  published  in  Fed¬ 
eral  Register  ) ,  a  statutory  appeal  pro¬ 
cedure.  A  request  for  review  of  a  refusal 
to  amend  a  personal  record  may  not  be 
processed  through  the  regulatory  griev¬ 
ance  procedure  of  AFR  40-771  or  a  griev¬ 
ance  procedure  contained  In  an  agree¬ 
ment  negotiated  under  Executive  Order 
11491,  as  amended. 

§  806b.  19  Statements  of  Disagreement, 

(a)  When  an  individual  files  a  state¬ 
ment  of  disagreement,  the  Systems  Man¬ 
ager  will  clearly  annotate  the  record  so 
that  the  disagreement  is  apparent  to 
anyone  who  may  subsequently  grant  ac¬ 
cess  to,  use,  refer  to,  or  disclose  the 
record.  When  an  accounting  of  disclo¬ 
sures  Is  available,  or  other  distribution 
data  are  known,  the  Systems  Manager 
wifi  advise  previous  recipients  that  the 
records  have  been  disputed  and  provide 
them  with  a  copy  of  the  Individual’s 
statement. 


(b)  The  Individual’s  statement  of  dis¬ 
agreement  should  be  filed  with  the  rec¬ 
ord  to  which  it  pertains.  Where  this  Is 
not  feasible  (for  example,  automated 
systems  or  microfiche) ,  It  will  be  main¬ 
tained  so  as  to  permit  ready  retrieval 
whenever  the  disputed  portion  of  the 
record  is  disclosed.  Every  effort  will  be 
made  to  assure,  by  annotation  or  other 
device,  that  whenever  the  disputed  rec¬ 
ord  Is  retrieved  or  used  for  any  purpose, 
the  user  will  be  referred  to  the  state¬ 
ment  of  disagreement. 

(c)  When  Information  which  Is  the 
subject  of  a  statement  of  disagreement 
Is  subsequently  disclosed,  the  Systems 
Manager  will  note  which  Information  in 
the  reoord  is  disputed  and  provide  the 
requester  a  copy  of  the  individual’s 
statement  of  disagreement.  The  Systems 
Manager  may  Include  a  brief  summary 
of  the  reasons  for  not  amending  the 
record  when  disclosing  disputed  Infor¬ 
mation.  Summaries  will  be  limited  to  the 
reasons  given  to  the  individual  by 
SAF/AA.  The  summary  will  be  treated 
as  a  part  of  the  individual’s  record;  how¬ 
ever,  it  will  not  be  subject  to  the  amend¬ 
ment  procedures. 

g  806b.20  Methods  of  Amending  Rec¬ 
ords. 

Amendments  of  records  will  be  physi¬ 
cally  accomplished,  as  circumstances 
warrant,  through  the  addition  of  sup¬ 
plementary  information,  or  by  means  of 
annotation,  alteration,  obliteration,  de¬ 
letion,  or  destruction  of  the  record  or  a 
portion  of  It.  Disposition  instructions 
In  Air  Force  Manual  12-50,  “Disposition 
of  Air  Force  Documentation,”  (not  pub¬ 
lished  In  Federal  Register)  ,  do  not  ap¬ 
ply  to  destruction  of  documents  accom¬ 
plished  in  order  to  amend  records  pur¬ 
suant  to  this  Part. 

§  806b. 21  Privacy  Case  Files. 

Privacy  case  files  will  be  established 
in  each  element  of  the  Air  Force  involved 
in  processing  privacy  requests.  Such  case 
files  will  include  requests  from  and  re¬ 
plies  to  individuals  on  whether  a  system 
contains  a  record  pertaining  to  them; 
requests  for  and  approvals  or  denials  of 
access;  requests  for  amendment  and 
approvals.  Initial  refusals,  and  final  re¬ 
view  actions;  coordination  actions;  and 
related  papers.  Privacy  case  files  will  be 
used  solely  in  processing  requests,  and 
as  a  source  of  precedents  for  formulating 
policies  and  procedures  or  for  processing 
similar  requests.  Under  no  circumstances 
will  privacy  case  files  be  disclosed  to 
make  any  other  determination  about  an 
individual.  Disposition  of  privacy  case 
files  win  be  in  accordance  with  Air  Force 
Manual  12-60. 

§  806b. 22  Air  Force  Privacy  Board  for 
Reviewing  Initial  Refusals. 

Membership  of  the  Board  will  consist 
of  a  representative  from  the  Air  Force 
Directorate  of  Administration  (chair¬ 
man)  ,  the  Office  of  The  Judge  Advocate 
General,  and  from  the  Air  Staff  function 
having  primary  responsibility  for  the 
record  In  question.  Functions  of  the 
Board  include: 
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(a)  Reviewing  requests  submitted  in 
accordance  with  §  806b.l8. 

(b)  Providing  recommendations  to  the 
Office  of  the  Vice  Chief  of  StafT  of  the 
Air  Force  which  will  either  order  the 
record  amended,  or  if  denial  is  deemed 
appropriate,  forward  the  request  through 
the  Office  of  the  Air  Force  General  Coun¬ 
sel  to  SAF/AA  for  a  final  decision.  A 
copy  of  the  decision  will  be  furnished 
to  the  denial  authority. 

Subpart  C — Disclosure  of  Personal  Infor¬ 
mation  to  Other  Agencies  and  Individuals 

§  806b.23  General  Information. 

Except  as  prescribed  in  Subpart  B, 
this  part  does  not  authorize  or  compel 
disclosure  of  records  to  anyone  other 
than  the  individual  to  whom  the  record 
pertains.  The  fact  that  an  individual  is 
informed  of  the  purposes  for  which  in¬ 
formation  is  collected  according  to 
S  806b. 30  does  not  constitute  consent  to 
disclose.  A  disclosure  may  be  either  the 
transfer  of  a  record  or  the  granting  of 
access  to  a  record.  Air  Force  activities 
will  not  automatically  disclose  a  record 
to  someone  other  than  the  individual  to 
whom  it  pertains  simply  because  such 
a  disclosure  is  permitted  in  §  806b. 24.  Air 
Force  activities  will  continue  to  abide 
by  other  constraints  on  their  authority 
to  disclose  information  to  a  third  party 
including  the  effect  upon  the  individual 
of  making  that  disclosure. 

§  806b.24  Conditions  of  Disclosure. 

No  record  contained  in  a  system  of  rec¬ 
ords  maintained  by  the  Department  of 
the  Air  Force  will  be  disclosed  by  any 
means  of  communication  (for  example, 
oral,  written,  electronic,  or  mechanical) 
to  any  person,  or  to  any  agency  outside 
the  Department  of  Defense  (DOD) ,  with¬ 
out  a  written  request  by,  or  the  prior 
written  consent  of,  the  individual  to 
whom  the  record  pertains,  unless  dis¬ 
closure  of  the  record  will  be: 

(a)  To  Department  of  Defense  (DOD) 
officials  and  employees  who  need  the  rec¬ 
ord  in  the  performance  of  their  duties 
and  who  will  use  the  record  for  the  pur¬ 
pose  for  which  it  is  maintained.  For 
example,  transfer  or  disclosure  of  in¬ 
formation  between  the  Air  Force  and 
other  DOD  components  when  Air  Force 
civilian  or  military  personnel  are  as¬ 
signed  to  or  processed  by  a  joint  activity 
or  another  component  or  activity  there¬ 
of,  such  as:  Armed  Forces  Examination 
and  Entrance  Stations  (AFEES),  Air 
Terminals,  and  Defense  Investigative 
Service  (DIS). 

(b)  Required  to  be  disclosed  to  the 
public  under  the  Freedom  of  Informa¬ 
tion  Act  (32  CFR  806).  Some  examples 
of  personal  information  pertaining  to 
military  personnel,  which  normally  are 
released  without  an  unwarranted  inva¬ 
sion  of  privacy  are:  name,  rank,  date 
of  rank,  gross  pay,  present  and  past  duty 
assignments,  future  assignments  which 
have  been  finalized,  office  or  unit  address 
and  phone  number,  source  of  commission, 
military  and  civilian  educational  level, 
and  promotion  sequence  number.  Dis¬ 
closure  of  personal  information  pertain¬ 


ing  to  civilian  employees  will  be  made  in 
accordance  with  the  Federal  Personnel 
Manual  (see  chapter  294,  section  7) . 

<c>  For  a  routine  use  as  explained  in 
§  806b.3  and  as  indicated  in  the  Air  Force 
or  other  agency  system  notices  published 
in  the  Federal  Register. 

(d)  To  the  Bureau  of  the  Census  for 
purposes  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity  pur¬ 
suant  to  Title  13,  United  States  Code. 

(e)  To  a  recipient  who  has  provided 
DOD  or  the  Air  Force  with  advance  writ¬ 
ten  assurance  that  the  record  will  be 
used  solely  as  a  statistical  research  or 
reporting  record;  and: 

(1)  The  record  is  to  be  transferred  in 
a  form  that  is  not  individually  identi¬ 
fiable  (that  is,  the  identity  of  the  in¬ 
dividual  cannot  be  determined  or  de¬ 
duced  by  combining  various  statistical 
records  or  by  referencing  to  public  rec¬ 
ords  or  other  available  sources  of  in¬ 
formation)  . 

(2)  The  record  will  not  be  used  to 
make  any  decisions  about  the  rights, 
benefits,  or  entitlements  of  an  individual. 

(f)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has  suf¬ 
ficient  historical  or  other  value  to  war¬ 
rant  its  continued  preservation  by  the 
United  States  Government,  or  for  eval¬ 
uation  by  the  Administrator  of  General 
Services  or  a  designee,  to  determine 
whether  the  record  has  such  value.  Rec¬ 
ords  transferred  to  Federal  records  cen¬ 
ters  for  safekeeping  or  storage  do  not 
fall  within  this  category  because  Fed¬ 
eral  records  center  personnel  act  on  be¬ 
half  of  the  Department  of  the  Air  Force 
in  this  instance  and  the  records  remain 
under  Air  Force  control.  No  disclosure 
accounting  record  of  the  transfer  of  rec¬ 
ords  to  Federal  records  centers  needs  to 
be  maintained  since  such  transfers  are 
not  considered  to  be  disclosures  within 
the  terms  of  this  regulation. 

(g)  To  an  agency  outside  of  DOD  (or 
instrumentality  of  any  governmental 
jurisdiction  within  or  under  the  control 
of  the  United  States)  for  a  civil  or  crimi¬ 
nal  law  enforcement  activity  authorized 
by  law.  The  head  of  the  agency  or  instru¬ 
mentality,  or  a  designee,  must  submit  a 
written  request  for  the  record  to  the 
System  Manager.  The  request  must 
specify  the  particular  record  or  portion 
desired  and  the  law  enforcement  pur¬ 
pose  for  which  the  record  is  requested. 
Blanket  requests  fo  all  records  pertain¬ 
ing  to  an  individual  will  not  be  accepted. 
A  record  may  also  be  disclosed  to  a  law 
enforcement  agency  by  the  Air  Force  of¬ 
fice  which  maintains  the  record  when 
criminal  conduct  is  suspected.  (This  dis¬ 
closure  has  been  established  as  a  routine 
use  for  all  USAF  record  systems  and 
published  in  the  Federal  Register  ac¬ 
cording  to  §  806b.5.) 

(h)  To  another  person  under  compel¬ 
ling  circumstances  affecting  the  health  or 
safety  of  an  individual  provided  that  no¬ 
tification  of  any  such  disclosure  is  sent 
to  the  last  known  address  of  the  individ¬ 
ual  to  whom  the  record  pertains.  The 
individual  on  whom  records  are  disclosed 
need  not  necessarily  be  the  individual 


whose  health  or  safety  is  at  peril,  such 
as  release  of  dental  records  on  several 
individuals  in  order  to  identify  an  indi¬ 
vidual  killed  or  seriously  injured  in  an 
accident. 

(1)  To  either  House  of  Congress,  Con¬ 
gressional  committee,  or  subcommittee 
thereof,  or  any  joint  committee  of  Con¬ 
gress,  in  pursuit  of  matters  within  its 
jurisdiction.  This  does  not  authorize 
disclosure  of  any  record  to  members  of 
Congress  acting  in  their  individual  ca¬ 
pacities  or  on  behalf  of  their  constitu¬ 
ents,  without  the  consent  of  the  indi¬ 
vidual. 

(j)  To  the  Comptroller  General,  or 
any  of  his  or  her  authorized  representa¬ 
tives,  on  business  of  the  General  Ac¬ 
counting  C  Tice. 

(k)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction : 

(l)  When  a  record  is  disclosed  under 
compulsory  legal  process  and  issuance  of 
that  order  or  subpoena  is  made  public 
by  the  court  which  issued  it,  reasonable 
efforts  must  be  made  to  notify  the  indi¬ 
vidual  to  whom  the  record  pertains.  This 
may  be  accomplished  by  notifying  the 
individual  by  mail  at  the  most  recent 
address. 

(2)  When  served  with  an  order  to  dis¬ 
close  a  record,  an  effort  will  be  made  to 
determine  whether  the  issuance  of  the 
order  is  a  matter  of  public  record.  If  it 
is  not,  ask  to  be  advked  if  it  becomes 
public.  An  accounting  of  the  disclosure 
will  be  made  at  the  time  of  compliance 
with  the  order  cr  subpoena. 

§  806b.  25  Requests  for  Disclosure  Re¬ 
ceived  Under  the  Freedom  of  Infor¬ 
mation  Act. 

If  the  information  is  part  of  a  system 
of  records  as  explained  in  §  806b.G,  proc¬ 
ess  requests  for  personal  information  re¬ 
ceived  under  the  Freedom  of  Informa¬ 
tion  Act  according  to  this  regulation. 

§  806b. 26  Accounting  of  Disclosures. 

Each  systems  manager  having  direct 
responsibility  for  and  physical  custody  of 
a  system  of  records  as  explained  in 
§  806b. 3  will: 

(a)  Except  for  the  disclosures  de¬ 
scribed  in  §  806b.24  (a)  and  (b),  keep  an 
accurate  accounting  of  the  date,  nature, 
and  purpose  of  each  disclosure  of  a  rec¬ 
ord  to  any  person  or  agency  outside  the 
Department  of  Defense;  and  the  name 
and  address  of  the  person  or  agency  to 
whom  the  disclosure  Ls  made.  Accounting 
is  required  even  when  disclosure  is  at  the 
individual’s  request  or  written  consent. 
Accounting  is  also  required  for  all  dis¬ 
closures  made  under  §  806b. 24  (c) 

through  (k).  When  feasible,  the  dis¬ 
closure  accounting  record  may  be  filed  in 
the  folder  for  each  individual  to  whom  it 
pertains.  However,  systems  managers 
need  not  make  a  notation  on  a  single 
document  of  every  disclosure  of  a  par¬ 
ticular  record,  provided  they  can  recon¬ 
struct  the  required  information  from 
their  accounting  systems  when: 

(1)  Requested  by  the  individual  under 
paragraph  (c)  of  this  section. 
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(2)  Necessary  to  inform  previous  re¬ 
cipients  of  any  corrected  or  disputed 
information. 

(3)  Necessary  to  provide  a  cross  ref¬ 
erence  to  the  justification  or  basis  for 
disclosure,  such  as  written  documenta¬ 
tion  which  is  required  when  releasing 
records  for  statistical  or  law  enforcement 
purposes. 

(4)  Necessary  to  provide  an  audit  trail 
for  subsequent  reviews  of  Air  Force  com¬ 
pliance  with  conditions  of  disclosure  out¬ 
lined  in  this  section. 

<b)  Retain  the  accounting  described 
in  §  806b.26(a)  for  at  least  five  years 
from  the  date  of  disclosure  or  the  life  of 
the  record,  whichever  is  longer.  No  ac¬ 
counting  of  the  disclosure  of  the  account¬ 
ing  need  be  maintained.  The  accounting 
need  not  be  retained  on  a  record-by¬ 
record  basis  as  long  as  the  procedures 
used  by  the  systems  manager  will  permit 
satisfying  the  requirements  in  paragraph 

(a)  of  this  section.  Further,  while  the 
accounting  of  disclosure  is  required  to 
be  maintained  for  at  least  five  years,  the 
record  itself  will  be  disposed  of  accord¬ 
ing  to  AFM  12-50. 

(c)  On  request  of  the  individual  to 
whom  the  record  pertains,  make  avail¬ 
able  to  that  individual  all  information  in 
the  accounting  of  disclosures  except 
those  pertaining  to  disclosures  to  an¬ 
other  agency  outside  DOD  or  Govern¬ 
ment  instrumentality  for  law  enforce¬ 
ment  purposes,  unless  the  system  of  rec¬ 
ords  is  exempt  from  this  part  according 
to  §  806b.45. 

(d)  Air  Force  Form _ ,  Accounting 

of  Disclosures.  Air  Force  Form _ may 

be  used  for  recording  required  documen¬ 
tary  information,  and  as  an  aid  for  com¬ 
piling  information  for  the  annual  report 
<§  806b.7).  However,  its  use  is  optional. 
Systems  managers  may  use  any  desir¬ 
able  system  for  keeping  notations  of  dis¬ 
closures,  provided  a  document  listing  of 
all  disclosures  can  be  constructed  from 
the  system. 

§  806b. 27  Names  and  Addresses. 

(a)  An  individual’s  name  and  address 
or  listings  will  not  be  sold  or  rented  by 
any  Air  Force  activity,  unless  specifically 
authorized  by  law.  This  will  not  be  con¬ 
strued  to  require  the  withholding  of 
names  and  addresses  otherwise  permitted 
to  be  made  public. 

(b)  Lists  or  compilations  of  names  and 
home  addresses,  or  individual  home  ad¬ 
dresses  will  not  be  disclosed  to  the  public 
without  the  consent  of  the  individual  in¬ 
volved.  The  public  includes,  but  is  not 
limited  to,  members  of  Congress  acting 
in  their  individual  capacities  or  on  be¬ 
half  of  constituents,  creditors,  and  com¬ 
mercial  and  financial  institutions.  Re¬ 
quests  for  home  addresses  may  be  sent  to 
the  individual’s  last  known  address.  The 
requester  is  notified  if  the  individual 
replies.  This  prohibition  may  be  waived 
when  circumstances  of  a  case  indicate 
compelling  and  overriding  interests. 

§  806b. 28  Processing  Telephone  Re¬ 
quests  for  Disclosure  of  Personal 
Record  Data. 

(a)  A  telephone  request  from  another 
agency  or  a  third  person  may  be  granted 


at  the  discretion  of  the  systems  manager 
or  official  directly  responsible  for  or 
having  direct  control  over  a  system  of 
records,  provided  the  information  to  be 
disclosed: 

(1)  Is  limited  to  data  which  if  re¬ 
leased  would  not  result  in  an  unwar¬ 
ranted  invasion  of  the  individual’s  per¬ 
sonal  privacy:  and 

(2)  The  disclosure  has  been  listed  as 
a  “routine  use”  in  the  record  systems 
notice  published  in  the  Federal  Register. 

Note:  In  some  Instances,  certain  portions 
of  a  record  may  be  releasable  to  the  public 
under  the  Freedom  of  Information  Act.  If 
so,  these  specific  portions  may  be  disclosed. 
For  more  guidance  on  what  military  per¬ 
sonnel  information  may  be  released  to  the 
public,  refer  to  §  806b.24(b). 

(b)  Identification  requirements  for 
telephone  disclosures  will  be  reasonable 
and  should  include  a  request  that  the 
caller  identify  himself  or  herself  by  pro¬ 
viding  name,  official  address,  telephone, 
or  similar  identifying  data  before  dis¬ 
closure  is  made.  Every  effort  will  be  made 
to  safeguard  against  unwarranted  dis¬ 
closures.  It  is  incumbent,  therefore,  on 
the  recipients  of  such  calls  to  confirm 
the  validity  of  the  request,  if  the  au¬ 
thenticity  of  the  telephone  requester  and 
need  for  the  personal  record  data  is  in 
question.  If  in  doubt,  ask  the  caller  to 
submit  a  written  request:  or  the  recip¬ 
ient,  at  his  or  her  discretion,  may  make 
a  return  call  to  insure  the  identity  of  the 
requester. 

Subpart  D — Collection  of  Personal 
Information  From  Individuals 

§  806b.29  Collection  Directly  From  the 
Individual. 

Collect  personal  information,  to  the 
greatest  extent  practicable,  directly  from 
the  individual  when  the  information  may 
result  in  adverse  determinations  about 
an  individual’s  rights,  benefits,  and  priv¬ 
ileges  under  Federal  programs.  Do  not 
collect  information  from  third  parties 
unless : 

(a)  The  accuracy  of  information  sup¬ 
plied  by  an  individual  must  be  verified 
with  a  third  party. 

(b)  The  nature  of  the  information  is 
such  that  it  can  only  be  obtained  from  a 
third  party,  such  as  an  employee’s  per¬ 
formance  in  a  previous  job  or  assign¬ 
ment. 

(c)  Obtaining  the  information  from 
the  individual  would  present  exceptional 
difficulties  or  would  result  in  unreason¬ 
able  cost. 

(d)  Other  compelling  and  unusual  cir¬ 
cumstances  similar  to  those  described 
above  necessitate  the  need  for  third  party 
involvement. 

§  806b. 30  Informing  Individuals  From 
Whom  Information  is  Requested. 

Individuals  who  are  asked  to  supply 
personal  information  about  themselves 
will  be  advised  of : 

(a)  The  Federal  statute  or  executive 
order  of  the  President  which  authorized 
the  solicitation  of  the  information,  in¬ 
cluding  the  brief  title  or  subject  of  that 
statute  or  order.  For  obtaining  the  Social 
Security  Number  (SSN),  provide  the 


statute,  executive  order,  Air  Force  de¬ 
partmental  or  local  directive,  or  other 
Government  agency’s  regulation  which 
requires  the  SSN. 

(b)  The  principal  purpose (s)  for  which 
it  is  to  be  used; 

(c)  The  routine  uses  to  be  made  of  it; 

(d)  Whether  furnishing  the  informa¬ 
tion  is  mandatory  or  voluntary;  and 

(e)  The  effects  on  the  individual,  if 
any,  of  not  providing  all  or  any  part  of 
it. 

Note:  This  advice  must  be  given  regardless 
of  the  media  used  in  requesting  or  recording 
information,  whether  it  is  a  form  in  the 
usual  sense  (that  is,  a  preprinted  document 
with  a  control  number  and  edition  date)  or 
a  format,  questionnaire,  survey  sheet,  or  re¬ 
port  rendered  on  a  blank  sheet. 

§  806b.31  Forms  in  Use  Prior  to  Septem¬ 
ber  27,  1975. 

To  meet  the  requirement  stated  in 
§  806b.30,  each  form  in  use  before  Sep¬ 
tember  27,  1975,  that  will  continue  to  be 
used  on  and  after  that  date,  must  be 
accompanied  by  Air  Force  Form  1607, 
Privacy  Act  Statement.  For  forms  not 
included  in  the  initial  reports  submis¬ 
sions  forwarded  to  HQ  USAF/Publica- 
tion  Systems  Management  Branch,  com¬ 
plete  Air  Force  Form  1606,  Register  of 
Forms  Affected  by  Privacy  Act,  and  Air 
Force  Form  1607,  as  shown  in  §§  806b.49 
and  806b. 50.  Follow  the  procedures  in 
§  806b. 33. 

§  8061i. 32  Forms  Initialed  or  Revised  on 
and  After  September  27,  1975. 

As  forms  are  revised  or  new  ones  issued, 
the  Privacy  Act  Statement  will  be  incor¬ 
porated,  if  practical,  in  the  body  of  each 
one.  It  should  be  conspicuously  placed  so 
the  individual  can  read  the  statement 
before  he  or  she  begins  to  furnish  the 
information  requested.  The  procedures 
contained  in  §  806b.33  apply. 

§  806b, 33  Processing  a  Form  That  So¬ 
licits  Personal  Information. 

(a)  Form  Explained.  Refer  to  §  806.3 
(a) . 

(b)  Originator  of  a  Form.  First,  deter¬ 
mine  whether  the  form  (new  or  revised) 
requires  a  Privacy  Act  Statement.  Con¬ 
sult  the  local  forms  management  official 
for  guidance,  if  needed.  If  the  Statement 
is  required. 

(1)  Complete  Air  Force  (AF)  Form 
1607  as  shown  in  §  806b.50.  Confirm  with 
the  local  Judge  Advocate  that  the  statu¬ 
tory  authority  or  executive  order  cited 
as  accurate. 

(2)  If  the  Social  Security  Number 
(SSN)  is  among  the  items  of  personal 
information  being  solicited,  then  state 
whether  disclosure  is  mandatory  or 
voluntary,  and  the  authority  and  uses  to 
be  made  of  it.  Although  a  separate 
Statement  need  not  be  completed  for  the 
SSN  alone,  entries  on  the  AF  Form  1607, 
as  stipulated  in  paragraph  (b)  (1)  of  this 
section  must  be  made  independently  of 
those  covering  other  items  of  informa¬ 
tion  being  requested.  See  §  806b.35  on 
Social  Security  Numbers. 

(3)  A  separate  AF  Form  1607  must  be 
completed  for  each  new  or  revised  form. 
If  the  form  to  be  revised  already  con¬ 
tains  the  printed  Statement  and  the  in- 
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formation  required  by  §  806b.30  is  cur¬ 
rent,  an  AF  Form  1607  need  not  be  re¬ 
submitted. 

(4)  Forward  the  completed  AF  Form 
1607  together  with  AF  Form  1141,  Re¬ 
quest  for  Approval  and  Development  of 
Form,  and  the  new  or  revised  form  (and 
prescribing  directive)  through  the  Pri¬ 
vacy  Officer  to  the  local  forms  manage¬ 
ment  official  for  review,  evaluation,  and 
processing. 

(5)  HQ  USAF  staff  offices  and  SO  As 
that  have  OPR  responsibility  for  AF  or 
Department  of  Defense  (DD)  forms,  ini¬ 
tiate  new  Privacy  Act  Statement  forms. 
Send  a  copy  of  AF  Form  1606,  AF  Form 
1141,  and  the  original  of  the  Privacy  Act 
Statement  to  HQ  USAF/Publications 
Division. 

(c)  Forms  Management  Official.  In 
reviewing,  evaluating,  and  processing, 
assure  that: 

(1)  Statements  are  sufficiently  com¬ 
plete  and  specific  but,  at  the  same  time, 
concise  and  phrased  in  language  easily 
understood  by  the  individual. 

(2)  Privacy  Act  Statements  are  avail¬ 
able  and  that  new  forms  contain  the  Pri¬ 
vacy  Act  Statement,  if  required. 

(3)  For  forms  in  regularly-issued, 
numbered  series  the  Statement  bears  the 
same  number  to  which  it  pertains.  For 
unnumbered  formats,  questionnaires, 
survey  forms  used  to  gather  information, 
that  the  Statement  bears  the  Report 
Control  Symbol  assigned  to  it. 

(4)  Cost  figures  are  maintained  for 
developing,  reproducing,  distributing  the 
new  or  revised  form.  These  figures  will  be 
included  in  the  Annual  Report  (see 
§  806b. 7) . 

(5)  A  list  of  all  forms  developed  locally 
that  solicit  personal  information  is  main¬ 
tained.  AF  Form  1606  may  be  used  for 
this  purpose. 

(6)  A  copy  of  each  new  or  revised  form 
containing  the  Privacy  Act  Statement  is 
provided  HQ  USAF/DAPS  through  the 
Command  Forms  Management  Office. 
The  Command  Forms  Management  Offi¬ 
cial  should  list  all  such  forms  on  AF  Form 
1606  and  forward  it  along  with  a  copy  of 
each  form  listed. 

§  806b. 3 1  Effect  of  the  Privacy  Act  of 
1974  on  Publications. 

(a)  Each  publication  issued  by  an  Air 
Force  organization,  which  requires  the 
maintenance,  collection,  use,  or  dissem¬ 
ination  of  a  system  of  records  subject  to 
the  Privacy  Act  of  1974  will  identify  the 
specific  statute  or  executive  order  of  the 
President  which  authorizes  the  records. 
Such  authority  may  be  derived  from: 

(1) A  Federal  statute,  or  executive  or¬ 
der  explicitly  authorizing  or  directing  the 
maintenance  of  a  system  of  records. 

(2)  A  Federal  statute,  or  executive  or¬ 
der  authorizing  or  directing  the  Air  Force 
to  perform  a  function,  which  requires  the 
maintenance  of  a  system  of  records. 

(b)  Coordination  with  the  appropriate 
Privacy  Act  Officer  and  Staff  Judge  Ad¬ 
vocate  is  mandatory  for  all  new  or  re¬ 
vised  publications  which  require  main¬ 
taining,  collecting,  using,  or  disseminat¬ 
ing  records  subject  to  the  Privacy  Act  of 
1974.  Include  in  a  separate  single  col¬ 


umn  paragraph,  set  one  space  below  the 
purpose  paragraph,  or  in  the  first  para¬ 
graph  of  each  affected  new,  revised,  or 
changed  publication  the  statement,  “This 
(regulation)  (manual)  (CBPOL)  is  af¬ 
fected  by  the  Privacy  Act  of  1974.  Each 
(form)  (format)  (questionnaire)  (survey 
sheet)  (report  rendered  on  a  blank  sheet 
of  paper)  which  is  required  by  this  (reg¬ 
ulation)  (manual)  (CBPOL)  contains  a 
Privacy  Act  Statement,  either  incorpo¬ 
rated  in  the  body  of  the  document  or 
in  a  separate  statement  accompanying 
each  such  document.” 

(c)  To  assist  users,  HQ  USAF  pub¬ 
lishes  a  separate  listing  of  departmental 
publications  that  are  affected  by  the  Pri¬ 
vacy  Act  of  1974,  in  appropriate  “O” 
series  indexes.  It  also  identifies  affected 
publications  by  using  the  symbol  “(Pri- 
Act)  ”  immediately  following  the  title  of 
the  affected  publication  in  the  numerical 
portion  of  the  index.  Similar  provisions 
should  be  made  at  MAJCOM,  SOA,  and 
subordinate  levels  for  affected  publica¬ 
tions  which  they  issue. 

§  806b. 35  Requesting  an  Individual’s 
Social  Security  Number  (SSN). 

(a)  No  individual  may  be  denied  any 
right,  benefit,  or  privilege  provided  by 
law  because  he  or  she  refuses  to  disclose 
his  or  her  SSN  unless  disclosure: 

(1)  Is  required  by  Federal  statute,  or 

(2)  Was  required  under  statute  or  reg¬ 
ulation  adopted  prior  to  January  1,  1975 
for  a  system  of  records  in  existence  and 
operating  before  that  date. 

Noth:  Executive  Order  9397,  November  22, 
1943,  authorizes  use  of  the  SSN  as  a  system 
of  numerical  identification  of  individuals. 

(b)  The  fact  that  disclosure  of  the 
SSN  is  not  required  by  Federal  statute 
or  is  not  for  a  system  of  records  in 
existence  and  operating  prior  to  Janu¬ 
ary  1,  1975,  does  not  preclude  Air  Force 
officials  requesting  it  from  individuals 
concerned.  However,  the  separate  Pri¬ 
vacy  Act  Statement  for  the  SSN  alone, 
or  a  merged  Privacy  Act  Statement,  cov¬ 
ering  not  only  the  SSN  but  also  other 
items  of  personal  information,  must 
make  clear  that  disclosure  of  the  SSN  is 
voluntary.  If  the  individual  refuses  to 
disclose  it,  be  prepared  to  identify  the 
individual  by  alternate  means. 

(c)  If  an  individual  is  asked  to  dis¬ 
close  his  or  her  SSN,  the  requesting  offi¬ 
cial  must  inform  the  individual  whether 
that  disclosure  is  mandatory  or  volun¬ 
tary;  by  what  statutory  or  other  author¬ 
ity  such  number  is  solicited;  and  what 
uses  will  be  made  of  it. 

(d)  Refer  to  §  §  806b.33  and  806b.50  for 
instructions  or  how  to  include  informa¬ 
tion  contained  in  paragraphs  (b)  and 
(c)  of  this  section  in  a  Privacy  Act 
Statement. 

Subpart  E — Systems  of  Records 
§  806b.36  General  Policies. 

(a)  Each  Air  Force  activity  will: 

(1)  Maintain  in  its  records  systems 
only  such  information  about  an  individ¬ 
ual  that  is  relevant  and  necessary  to  ac¬ 
complish  its  mission  required  by  Federal 
statute  or  executive  order. 


(2)  Identify  the  specific  provision  of 
law  or  executive  order  which  provides 
authority  for  maintaining  personal  in¬ 
formation  in  each  system  of  records. 

(b)  Statutory  authority  to  establish  or 
maintain  a  system  of  records  does  not 
convey  unlimited  authority  to  collect  and 
maintain  information  for  useful  or  con¬ 
venient  purposes.  The  Systems  Manager 
for  each  system  of  records  will  evaluate 
each  category  of  information  in  a  sys¬ 
tem  to  determine  relevance  and  neces¬ 
sity.  In  performing  this  evaluation  the 
System  Manager  considers: 

(1)  Relationship  of  each  item  of  in¬ 
formation  to  the  statutory  purpose  for 
which  the  system  is  maintained. 

(2)  Specific  adverse  consequence  of 
not  collecting  each  category  of  informa¬ 
tion. 

(3)  Possibility  of  meeting  the  infor¬ 
mation  requirement  through  use  of  data 
not  individually  identifiable  or  through 
sampling  techniques. 

(4)  Length  of  time  that  the  informa¬ 
tion  is  needed  and,  where  appropriate, 
techniques  for  purging  parts  of  the  rec¬ 
ord. 

(5)  Financial  cost  of  information 
maintenance  compared  to  risk  or  adverse 
consequence  of  not  maintaining  it. 

(6)  Necessity  and  relevance  of  this  in¬ 
formation  to  all  individuals  included  in 
the  system. 

(c)  After  completion  of  the  evaluation 
in  §  806b.36(b)  discontinue  each  cate¬ 
gory  or  item  of  information  that  does  not 
appear  to  be  reasonably  justifiable.  Such 
information  will  be  deleted,  withdrawn, 
or  destroyed  provided  it  can  be  economi¬ 
cally  segregated  from  necessary  and  rele¬ 
vant  information. 

(d)  The  evaluation  prescribed  above 
will  be  performed: 

(1)  During  the  design  phase  of  a  new 
system  of  records  or  a  change  in  an  ex¬ 
isting  system  of  records. 

(2)  Annually,  prior  to  the  publication 
of  all  system  notices  in  the  Federal  Reg¬ 
ister. 

§  806b. 37  Record  System  Notices,  RCS: 

DD— A(A)  1379. 

The  Privacy  Act  of  1974  requires  that 
a  notice  of  the  existence  of  each  system 
of  records,  as  defined  in  §  8060.3  be  pub¬ 
lished  in  the  Federal  Register.  The 
notice  provision  of  the  Act  is  based  on 
the  premise  that  there  should  be  no  sys¬ 
tem  of  records  whose  very  existence  is 
secret.  Published  system  notices  are  the 
means  by  which  an  individual  may  iden¬ 
tify  and  request  access  to  a  system  con¬ 
taining  a  record  on  him  or  her.  Public 
notices  for  existing  Air  Force  systems  of 
records  have  been  published  in  the  Fed¬ 
eral  Register. 

(a)  Privacy  Act  Officers  who  discover 
a  system  of  records  which  has  not  been 
published  in  the  Federal  Register  will 
notify  HQ  USAF/DAD,  Washington,  D.C. 
system  notice  prepared  in  accordance 
with  the  format  and  instructions  in  sub¬ 
part  H  of  this  part.  HQ  USAF/DAD  will : 

(1)  If  not  predetermined,  identify  the 
applicable  systems  manager. 

(2)  Coordinate  publication  of  a  public 
notice,  or  discontinuance  or  rearrange- 
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ment  of  the  System  with  the  systems 
manager. 

(3>  Provide  the  reporting  activity 
instructions  concerning  continued  main¬ 
tenance  or  discontinuance  of  the  system. 

<b>  No  existing  files  series  will  be  re¬ 
arranged  and  used  to  permit  retrieval  by 
name,  SSN.  or  other  individual  identifier 
without  prior  publication  of  a  record 
system  notice  in  the  Federal  Register. 
In  effect,  such  rearrangement  constitutes 
a  new  system  of  records. 

§  8061>. 38  Report  of  New  System*  of 
Records  That  Require  Advance  Pub¬ 
lic  Notice,  RCS:  I>D-A(A)  1379. 

A  report  is  required  to  be  submitted  to 
Congress  and  Office  of  Management  and 
Budget  (OMB)  for  each  proposed  new 
system  of  records  and  for  changes  to 
existing  systems.  The  purpose  is  to  per¬ 
mit  an  evaluation  of  the  probable  or  po¬ 
tential  effect  on  such  proposal  on  the 
privacy  and  other  personal  or  property 
rights  of  individuals,  or  the  disclosure 
of  information  relating  to  such  indi¬ 
viduals  Format  and  instructions  for  this 
report  are  included  in  Subpart  H  of  this 
part. 

§  806b. 39  Changes  To  Existing  Systems 
Not  Requiring  Advance  Public  Notice. 

Changes  to  systems  of  records  not 
stated  in  §  806b. 56  do  not  require  ad¬ 
vanced  public  notice  before  implementa¬ 
tion.  Systems  managers  will  submit  to 
command  Privacy  Act  Officers,  changes 
to  existing  notices  when  such  changes 
are  made  to  their  systems,  not  records. 
As  a  minimum,  notification  of  such 
changes  will  include  the  system  identifi¬ 
cation  number  and  title,  and  the  ap¬ 
propriate  section  of  the  system  notice  re¬ 
vised  to  incorporate  the  changes.  Submit 
changes  in  hard  copy  to  HQ  USAF/DAD, 
Washington,  D.C.  20330,  for  consolida¬ 
tion  and  submission  to  the  Defense 
Privacy  Board  and  publication  in  the 
Federal  Register’s  annual  compilation 
of  system  notices. 

§  806b.  40  Standards  of  Accuracy. 

(a)  Records  used  in  making  deter¬ 
minations  about  an  individual  will  be 
maintained  with  accuracy,  relevance, 
timeliness,  and  completeness  to  ensure 
fairness  to  the  individual  in  any  deter¬ 
mination. 

(b)  Prior  to  disseminating  any  record 
about  an  individual  to  any  person, 
reasonable  efforts  will  be  made  to  ensure 
that  such  records  are  accurate,  complete, 
timely,  and  relevant  for  agency  purposes. 

§  806b. 41  Restriction  on  Maintenance 
of  Certain  Records. 

Maintenance  of  a  system  of  records 
describing  how  individuals  exercise  rights 
guaranteed  by  the  First  Amendment  are 
prohibited,  unless  authorized  by  Federal 
statute;  by  the  individual  concerned;  or 
pertinent  to  an  authorized  law  enforce¬ 
ment  activity.  These  rights  include,  but 
are  not  limited  to,  religious  and  political 
beliefs,  freedom  of  speech  and  the  press, 
and  the  right  of  assembly  and  to  peti¬ 
tion. 


§  806b. 42  Rules  of  Conduct. 

Persons,  including  government  con¬ 
tractors  or  their  employees,  involved  in 
the  design,  development,  operation, 
maintenance  or  control  of  any  system  of 
records,  will  be  informed  of  all  require¬ 
ments  to  protect  the  privacy  of  the  indi¬ 
viduals  who  are  subjects  of  the  records. 
The  following  sanctions  will  be  empha¬ 
sized  to  personnel: 

(a)  There  are  criminal  penalties  for 
knowingly  and  willfully  disclosing  a  rec¬ 
ord  about  an  individual  without  the 
written  consent  or  the  written  request  of 
that  individual,  or  unless  disclosure  is  for 
one  of  the  reasons  listed  in  §  806b.24. 

<b)  The  Air  Force  may  be  subject  to 
civil  suit  for  failure  to  comply  with  the 
Privacy  Act. 

(c)  Refer  also  to  §  806b.6  on  judicial 
sanctions. 

§  806b. 43  Safeguarding  Personal  Infor¬ 
mation  in  Records  Systems. 

(a)  Each  systems  manager  will  estab¬ 
lish  administrative  and  physical  safe¬ 
guards  to  protect  each  system  of  records 
from  unauthorized  or  unintentional 
access,  disclosure,  modification,  or  de¬ 
struction.  These  safeguards  will  apply 
to  systems  of  records,  in  whatever  me¬ 
dium  in  which  personal  information  is 
processed  or  stored,  and  will  be  tailored 
to  the  requirements  of  each  system  of 
records. 

(b)  Access  to  personal  information  will 
be  restricted  to  those  persons  whose  offi¬ 
cial  duties  require  access,  and  the  indi¬ 
vidual  concerned,  and  as  prescribed 
herein. 

(c)  Systems  managers  and  officials 
having  direct  custodial  responsibility  for 
systems  of  records  will  ensure  that  all 
persons  whose  official  duties  require  ac¬ 
cess  to  or  processing  and  maintenance  of 
personal  information  are  trained  in  the 
proper  safeguarding  and  use  of  such 
information: 

(1)  First  by  viewing  the  Air  Force  Pri¬ 
vacy  Act  film;  and 

(2)  Acquiring  knowledge  of  the  policies 
and  procedures  in  this  regulation. 

(3)  Privacy  officials  at  each  echelon 
will  provide  assistance  as  needed.  HQ 
USAF/DAD  will  have  overall  respon¬ 
sibility  for  management  of  the  training 
program. 

(d)  Personal  records  and  documents 
will  be  stored  to  preclude  unauthorized 
disclosure. 

(e)  Dispose  of  records  containing  per¬ 
sonal  information  which  are  eligible  for 
disposal  as  provided  in  AFM  12-50  to 
destroy  the  record  content,  by  tearing 
into  pieces,  shredding,  pulping,  macerat¬ 
ing,  burning,  or  burying,  depending  on 
volume  and  availability  of  facilities.  (Also 
see  AFM  12-50,  paragraph  410.) 

Subpart  F — Exemptions 
§  806b. 44  General  Procedures. 

The  Secretary  of  the  Air  Force  desig¬ 
nates  those  Air  Force  systems  of  records 
which  will  be  exempt  from  certain  provi¬ 
sions  of  the  Privacy  Act.  General  policies 


and  procedures  governing  the  systems  of 
records  follow : 

(a)  There  are  two  types  of  exemp¬ 
tions,  general,  and  specific.  The  general 
exemption  authorizes  the  exemption  of 
a  system  of  records  from  all  but  a  few 
requirements  of  the  Act.  The  specific 
exemption  authorizes  exemption  of  a 
system  or  portion  thereof  from  only  a 
few  specific  requirements. 

(b)  If  an  activity  originates  a  new 
system  of  records  for  which  it  proposes 
an  exemption,  or  if  it  proposes  an  addi¬ 
tional  or  new  exemption  for  an  existing 
system  of  records,  it  will  submit  the 
recommended  exemption  with  the  rec¬ 
ords  system  notice  as  outlined  in  this 
paragraph. 

(c)  No  exemption  of  a  system  of 
records  will  be  considered  automatic  for 
all  records  in  the  system.  The  systems 
manager  will  review  each  requested 
record  and  apply  the  exemptions  only 
when  this  will  serve  a  significant  and 
legitimate  Government  purpose. 

§  806b. 43  General  Exemptions. 

Only  USAF  activities  actually  engaged 
in  law  enforcement,  to  include  Staff 
Judge  Advocate  and  correctional  activi¬ 
ties,  may  claim  the  general  exemption 
for  a  system  of  records.  Those  records 
from  a  system  of  records,  exempted  from 
certain  provisions  of  the  Act  under  the 
general  exemption,  will  retain  those  ex¬ 
emptions  while  being  used  by  command¬ 
ers  to  determine  appropriate  judicial  or 
administrative  actions.  Such  a  system  of 
records  must  consist  of: 

(a)  Information  compiled  for  the  pur¬ 
pose  of  identifying  individual  criminal 
offenders  and  alleged  offenders  and  con¬ 
taining  only  identifying  data  and  nota¬ 
tions  of  arrests,  the  nature  and  disposi¬ 
tion  of  criminal  charges,  sentencing,  con¬ 
finement,  release,  and  parole  and  proba¬ 
tion  status; 

(b)  Information  compiled  for  the  pur¬ 
pose  of  criminal  investigation,  to  include 
efforts  to  prevent,  control,  or  reduce 
crime,  including  reports  of  informants 
and  investigators,  and  associated  with 
an  identifiable  individual;  or 

(c)  Reports  Identifiable  to  an  in¬ 
dividual  compiled  at  any  stage  of  the 
process  of  enforcement  of  the  criminal 
laws  from  arrest  or  indictment  through 
release  from  supervision. 

(d)  Systems  for  which  a  general  ex¬ 
emption  is  claimed  may  be  exempted 
from  selected  provisions  of  5  U.S.C.  552a 
(see  §  806b.52),  and  from  the  following 
provisions  of  this  part: 

(1)  Section  806b. 10  through  806b. 14. 
Providing  the  individual  access  to  his  or 
her  records. 

(2)  Sections  806b. 15  through  806b.20. 
Provisions  dealing  with  amendment  of 
records. 

(3)  Section  806b.24(k) .  Informing  the 
individual  when  his  or  her  record  is  dis¬ 
closed  in  compulsory  legal  proceedings. 

(4)  Section  806b.26(c).  Providing  the 
individual  access  to  his  or  her  account¬ 
ing  disclosure  of  record. 

(5)  Subpart  D  of  this  part.  All  pro¬ 
visions  except  those  concerned  with  in- 
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forming  the  individual  of  the  authority 
for  requesting  his  or  her  SSN,  the  use(s) 
to  be  made  of  it,  and  whether  furnish¬ 
ing  it  is  voluntary  or  mandatory. 

(6)  Sections  806b.55(b)  (20)  to  806b.55 

(b)(23).  Notification,  Access,  Contest, 
and  Source  provisions  of  system  notices. 

(7)  Not  included  in  the  provisions  of 
this  part.  The  civil  remedies  afforded  an 
individual  by  the  act. 

§  806k. 46  Specific  Exemptions. 

(a)  The  Secretary  of  the  Air  Force 
has  exempted  from  disclosure  in  accord¬ 
ance  with  5  U.S.C.,  552a(k)  (1)  all  prop¬ 
erly  classified  information  contained  in 
any  Air  Force  system  of  records  and 
which  must  remain  classified  in  the  in¬ 
terest  of  national  defense  or  foreign 
policy.  However,  prior  to  denying  an  in¬ 
dividual  access  to  such  classified  infor¬ 
mation,  the  proper  authority  will  insure 
that  the  information  has  been  properly 
classified  and  that  it  must  remain  clas¬ 
sified. 

(b)  Personal  data  that  is  specifically 
exempted  under  the  provisions  of  the 
act: 

(1)  Classified  information  specifically 
authorized  under  criteria  established 
under  Executive  Order  11652,  and  im¬ 
plementing  directive  to  be  kept  classified 
in  the  interest  of  national  defense  or 
foreign  policy  and  are  in  fact  properly 
classified  pursuant  to  such  executive 
order. 

(2)  Investigatory  material  compiled 
for  law  enforcement  purposes,  other 
than  material  covered  under  a  general 
exemption.  However,  an  individual  will 
not  be  denied  access  to  information 
which  has  been  used  to  deny  him  or  her 
a  right  or  privilege  unless  disclosure 
would  reveal  a  confidential  source. 

(3)  Presidential  protection  files  main¬ 
tained  in  connection  with  providing  pro¬ 
tective  service  to  the  President  of  the 
United  States  or  other  individuals  pur¬ 
suant  to  18  U.S.C.  3056. 

(4)  Statistical  files  required  by  statute 
to  be  used  only  for  statistical  purposes 
and  which  are  not  used  to  make  decisions 
on  the  rights,  benefits,  or  entitlements 
of  individuals. 

(5)  Employment  and  investigatory  in¬ 
formation  compiled  for  determining 
suitability,  eligibility,  or  qualifications 


for  Federal  service;  Federal  contracts 
and  access  to  classified  information,  but 
only  to  the  extent  that  disclosure  would 
reveal  a  confidential  source. 

(6)  Testing  material  for  determining 
an  individual’s  qualifications  for  appoint¬ 
ment  or  promotion  in  the  Federal  service 
if  disclosure  would  compromise  objectiv¬ 
ity  or  fairness  of  the  examination  proc¬ 
ess. 

(7)  Armed  Forces  promotion  material 
used  to  determine  potential  for  promo¬ 
tion  in  the  Armed  Forces,  but  only  to 
the  extent  that  the  disclosure  of  such 
material  would  reveal  the  identity  of  a 
confidential  source. 

(c)  Exemptions  authorized  in  para¬ 
graphs  (b)  (2)  and  (5)  of  this  section, 
may  be  claimed  only  to  the  extent  that 
disclosure  would  reveal  the  identity  of  a 
source  who  furnished  information  to  the 
Government  under: 

(1)  An  express  promise  that  his  or  her 
identity  would  be  held  in  confidence. 

(2)  An  implied  promise,  made  prior  to 
September  27,  1975,  that  his  or  her  iden¬ 
tity  would  be  held  in  confidence. 

(d)  Systems  for  which  a  specific  ex¬ 
emption  is  claimed  may  be  exempted 
from  certain  provisions  of  5  U.S.C.  552a 
(see  §  806b. 53)  and  from  the  following 
requirements  of  this  Part: 

(1)  Sections  806b.9  to  806b.l3.  Provid¬ 
ing  the  individual  access  to  his  or  her 
records. 

(2)  Sections  806b.l4  to  806b.l9.  Provi¬ 
sions  dealing  with  amendment  of  records. 

(3)  Section  806b.25(c).  Providing  the 
individual  access  to  his  or  her  accounting 
disclosure  of  record. 

(4)  Notification,  Access,  Contest,  and 
Soure  provisions  of  system  notices  pub¬ 
lished  in  the  Federal  Register. 

(e)  Promises  of  confidentiality.  Prom¬ 
ises  of  confidentiality  will  be  given  on  a 
selective  and  as  needed  basis.  Only  offi¬ 
cials  authorized  by  Air  Force  or  Depart¬ 
ment  of  Defense  directives  may  grant 
such  promises. 

§  806b.47  Exempted  Records  in  Nonex- 
emptcd  Systems  of  Records. 

Where  a  record,  which  is  maintained 
by  any  element  of  the  Federal  Govern¬ 
ment  and  for  which  a  general  or  specific 
exemption  has  been  claimed,  is  trans¬ 
ferred  temporarily  to  any  element  of  the 
Air  Force  for  official  purposes  (for  exam¬ 


ple,  adjudication,  personnel  action),  the 
record  will  retain  its  exemption  so  long 
as  it  is  not  incorporated  Into  an  Air 
Force  system  of  records.  If  such  incorpo¬ 
ration  occurs,  only  exemptions  claimed 
for  the  Air  Force  system  will  apply  to  the 
incorporated  record. 

§  806b.48  Submission  Instructions. 

(a)  When  a  Systems  Manager  desires 
to  claim  either  a  general  or  a  specific  ex¬ 
emption,  submit  to  HQ  USAF/DAD, 
Washington,  D.C.  20330,  the  identifica¬ 
tion  symbol  and  title  (as  given  in  the  re¬ 
lated  system  notice),  the  specific  pro¬ 
visions  of  the  Act  and  this  Part  for 
which  exemptions  are  sought,  and  the 
reasons  therefor.  A  separate  reason  need 
not  be  stated  for  each  provision  from 
which  a  system  is  being  exempted,  when 
a  single  explanation  will  serve  to  explain 
more  than  one  exempted  provision.  HQ 
USAF/DAD  will: 

(1)  Seek  the  HQ  USAF  Privacy  Re¬ 
view  Board’s  approval  for  the  Secretary 
of  the  Air  Force. 

(2)  On  approval  by  the  Secretary  of 
the  Air  Force,  prepare  a  proposed  exemp¬ 
tion  rule. 

(3)  Transmit  the  proposed  rule  for 
publication  in  the  Federal  Register  as 
a  notice  of  proposed  rule  making. 

(4)  After  thirty  days,  and  considera¬ 
tion  of  any  public  comments,  transmit 
the  final  exemption  rule  for  publication 
in  the  Federal  Register. 

(5)  Notify  the  system  manager  of  the 
effective  date  of  the  exemption. 

(b)  The  Privacy  Act  requires  exemp¬ 
tion  rules  to  be  published  in  the  Federal 
Register  separately  from  system  notices. 
To  simplify  reference  and  use  within  the 
Air  Force,  exemption  rules  have  been 
separated  from  the  applicable  system 
notices,  and  are  listed  in  §§  806b.57  and 
806b.58. 

(c)  Sections  806b.52  and  806b.53  con¬ 
tain  formats  and  instructions  for  prepa¬ 
ration  of  general  and  specific  exemption 
rules. 

Subpart  G — Figures 

§  806b.49  Figure  1.  Instructions  for 
Completing  Air  Force  Form  1606, 
“Register  of  Forms  Affected  By  Pri¬ 
vacy  Act.” 

Follow  the  instructions  contained  on 
the  form  itself;  also  refer  to  S  806b. 33 
for  guidelines  on  how  to  process  it. 
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Figure  i 


REGISTER  OF  FORMS  AFFECTED  BY  PRIVACY  ACT 


I  TO»  lOffet  Srnbol  of  Formt Management  Of/tccJ  FROM! 

INSTRUCTIONS 

I  L  Under  Column  *A*.  BN  dwsefcmu  a/Tccted  by  Privacy  Act  foi  which  youi  ocfuiutlon  U  the  Office  of  Primacy  Responsibility  (OPR).  Pet 

1  example:  AF,  AFHQ,  AFHCMF ./Command  Headquartest,  etc,  Fach  form  designation  and  numbet  will  be  grouped  separately  in  num.'ric 

doquj»eeu  (Note;  A  Privocf  ActjZtotement  will  be  furnished  for  eoch  form  tittid.) 

I  2.  Under  Column  ”B",  cite  the  office  symbol  of  the  functional  element  for  each  form. 

I  S.  Under  Column  "C”,  p've  the  Mmc  of  the  person  responsible  foe  preparing  Privacy  Act  Statement  applicable  for  etch  form  Oiled. 

_ : _ _ _ ! 

! 

|  FORM  DESIGNATION, 

I  NUMBER  AND 

EDITION  DATE 

A 

OFFICE  SYMBOL 

Of  FUNCTIONAL 
ELEMENT 

B 

NAME,  GRADE,  TELEPHONE  NUMBER  OF  PERSON  WHO 

PREPARED  PRIVACY  ACT  STATEMENT 

c  1 

. . . 

I 

| 

1 

1 

1 

1 

I 

1 

1 

1 

1 

] 

1 

1  TYPED  NAME  AND  SIGNATURE  OF  RESPONSE 

1  BLE  OFFICIAL 

TYPED  NAME,  G  R  ADE,  TELEPHONE  NUMBER  OB  PROJECT  OFPSCCft 

1 

AF  ££^1606  pace  op  pagcc 


§  806b.50  Figure  2.  Instruction*  for 
Completing  AF  Form  1607,  “Priwty 
Act  Statement.” 

(a)  Complete  the  form  by  typewriter, 
legibly  enough  for  use  as  camera  ready 
copy. 

(b)  Insert  the  appropriate  statutory 
authority  which  has  been  confirmed  by 
the  Judge  Advocate  as  being  accurate. 

Note. — When  a  social  security  number  Is 
requested  and  the  authority  for  requesting 
the  number  Is  different  from  that  of  other 


Items  of  Information,  insert  the  appropriate 
authority. 

(c)  Self-explanatory. 

(d)  When  a  social  security  number  is 
requested  in  addition  to  other  items  of 
information,  an  appropriate  entry  must 
be  inserted  independently  from  those 
covering  other  items  of  information. 

(e)  Affix  the  form  number  to  which 
the  statement  applies  followed  by  the 
words  “Privacy  Act  Statement”  e.g.,  “AF 
Form  —  Privacy  Act  Statement.”  If  the 
form  is  unnumbered  so  state. 


i 
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§  806b. 51  Figure  3.  Preparing  an  AF 
Form  — .  “Accounting  of  Disclo¬ 
sures.” 

< a)  Indicate  in  addition  to  the  “record 
system  name”  the  type  of  system  “man¬ 
ual,  automated  or  microform”  in  which 
the  information  is  maintained, 
ib)  Functional  Address  Symbol. 

(c)  Self-explanatory, 
id)  Self-explanatory. 

(e)  (1)  Nature.  Indicate  what  has  been 
disclosed:  social  security  number,  service 
record,  birth  date,  etc. 

(2)  Purpose.  Indicate  intended  use: 
routine,  statistical  research,  law  enforce¬ 
ment  purposes,  etc. 

(f)  Insert  the  name  of  the  individual 
to  whom  the  record  pertains. 

(g)  To  determine  applicability  of 
“No — Not  Required”  see  §  806b.24. 

§  806b. 32  Figure  4.  General  Exemp¬ 
tions  Format- 

Identification:  (ID  from  system  notice) 
Systems  Name:  (from  system  notice) 
Exemptions:  This  system  of  records  is  ex¬ 
empted  from  the  following  provisions  of  5 
U.S.C.  552a:  (c)(3),  (c)(4),  (d),  (e)(2),  (e) 
(3),  (e)(4)(G),  (e)(4)(H),  (e)(4)  (I),  (e) 
(5), (e)(8),  (f).  and  (g). 

Authority:  5  U.S.C.  552a(J)  (2) 

Reasons:  Granting  individuals  access  to 
information  collected  and  maintained  by  the 
Air  Force  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly 
investigations,  with  the  orderly  administra¬ 
tion  of  Justice,  and  possibly  enable  suspects 
to  avoid  detection  or  apprehension.  Disclo¬ 
sure  of  this  information  could  result  in  the 
concealment,  destruction,  or  fabrication  of 
evidence  and  jeopardize  the  safety  and  well 
being  of  informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  information 
could  also  reveal  and  render  ineffectual  in¬ 
vestigative  techniques,  sources  and  methods 
used  by  the  Air  Force  component  and  could 
result  in  the  invasion  of  the  privacy  of  indi¬ 
viduals  only  incidentally  related  to  an  inves¬ 
tigation. 

The  exemption  of  the  individual’s  right  of 
access  to  his  or  her  records  and  the  reasons 
therefor  necessitate  the  exemption  of  this 
system  of  records  from  the  requirements  of 
the  other  cited  provisions. 

§  806b.. >3  Figure  5.  Specific  Exemp¬ 
tion  Format. 

Identification  Number:  (ID  from  system 
notice) 

System  Name:  (from  system  notice) 
Exemptions:  This  system  of  records  is 
exempt  from  the  following  provisions  of 
5  U.S.C.  552a:  (Possible  subsections:  (c)(3), 
(d).  (e)(1).  (e)(4)(G),  (e)(4)(H),  (e)(4) 
(I),  and  (f)). 

Authority:  5  U.S.C.  552a(k)  (  )  (Cite  one 
or  more  subsections  552a(k)  (1)  thru  (7), 
as  applicable.) 

Reasons:  (Cite  specific  reasons  for  each 
subsection  from  which  an  exemption  is 
claimed.  Where  a  system  is  exempted  from 
the  requirements  of  subsection  (d),  it  will 
normally  also  be  exempted  from  the  require¬ 
ments  of  subsection  (c)(3),  (e)(4)(G),  (e) 
(4)  (H) ,  and  <f)). 

Note. — A  separate  reason  or  Justification 
need  not  be  given  for  each  provision  of  the 
Act  from  which  the  system  or  part  thereof 
is  to  be  exempt,  provided  a  single  explana¬ 
tion  will  serve  to  explain  the  entire 
exemption. 


§  806b. 54  [Reserved] 

Subpart  H 

§  806b. 55  [Reserved] 

§  806b. 56  [Reserved] 

§  806b. 57  Ceneral  Exemptions, 

(a)  Index  Cross-Referencing  Provi¬ 
sions  of  the  Privacy  Act  of  1974  ivith  this 
Part. 


Privacy  Act 

Part  806b 

Provision 

Section — 

(c)(3)  - 

806b  .26(c) 

(c)(4)  - 

806b.26(a)  (2) 

(d)  . 

806b  .9,  .10,  .11,  .12, 
.15,  .16,  J7.  .18, 
.19,  .20,  .21,  .22 

(e)(1)  . 

806b.36(a)  (1) 

(e)(2)  . . . 

806b  .29 

(e)(3)  - 

806b  .30 

(e)(4)(G)  . . 

806b  .20 

(e)(4)(H)  - - 

806b  .21,  .22 

(e)(4)  (I)  . 

806b  .23,  .24 

(e)(8)  - 

806b.24(k)  (1) 

(f)(1) - 

806b  .9.  .10.  .11 

(f)(2)  . 

806b. 12 

(0(3)  . 

806b  .24,  .28,  .9(a) 
(3) 

(f)(4)  . 

806b  .15,  .16,  .17,  .18, 
.19.  .20 

(f)(5)  — . 

806b. 11(d) 

(g)  . 

806b.6(a)  (1),  (2), 

(3).  (4) 


(b)  12404, 12408, 12410, 12501  Criminal 
Investigative  Files. 

(1)  Exemption.  These  systems  of  rec¬ 
ords  are  exempted  from  the  following 
provisions  of  5  U.S.C.  552a:  (c)(3),  (c) 
(4),  (d),  (e)(2),  (e)(3),  (e)(4)(G),  (e) 
(4)  (H) ,  (e)(4)  (I),  (e)(8),  (f),  and  (g) 
(Investigative  Support  Records,  Coun¬ 
terintelligence  Operations  and  Collec¬ 
tions  Records,  Criminal  Records,  Incident 
Investigation  Files) . 

(2)  Authority.  5  U.S.C.  552a(j)  (2). 

(3)  Reasons.  Granting  individuals  ac¬ 
cess  to  information  collected  and  main¬ 
tained  by  the  Department  of  the  Air 
Force  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly 
investigations,  with  the  orderly  admin¬ 
istration  of  justice,  and  could  possibly 
enable  suspects  to  avoid  detection  or  ap¬ 
prehension.  Disclosure  of  this  informa¬ 
tion  could  result  in  the  concealment,  de¬ 
struction,  or  fabrication  of  evidence  and 
could  jeopardize  the  safety  and  well 
being  of  informants,  witnesses,  and  their 
families,  and  law  enforcement  personnel 
and  their  families.  Disclosure  of  this  in¬ 
formation  could  also  reveal  and  render 
ineffectual  investigative  techniques, 
sources,  and  methods  used  by  the  Air 
Force,  and  could  result  in  the  invasion  of 
the  privacy  of  individuals  who  are  only 
incidentally  related  to  an  investigation. 

§  806b. 58  Specific  Exemptions. 

All  records  in  systems  of  records  main¬ 
tained  by  the  Department  of  the  Air 
Force  shall  be  exempt  from  the  require¬ 
ments  of  5  U.S.C.  552a  (c)(3),  (d),  (e) 

(4)  (G) ,  (e)(4)(H),  (e)(4)  (I),  and  (f) 
pursuant  to  5  U.S.C.  552a(k)(l)  to  the 
extent  that  the  records  are  properly 
classified  pursuant  to  Executive  Order 
and  authorized  to  be  kept  secret  in  the 
interest  of  national  defense  or  foreign 


policy.  This  exemption,  which  may  be 
applicable  to  all  or  parts  of  all  systems 
of  records,  is  necessary  because  certain 
record  systems  not  otherwise  specifically 
designated  for  exemptions  may  contain 
isolated  information  which  has  been 
properly  classified. 

(a)  3005  Equal  Opportunity  in  Off- 
Base  Housing. 

(1)  Exemption.  This  system  of  records 
is  exempt  from  the  following  provisions 
of  5  U.S.C.  552a:  (c)  (3) ,  (d) ,  (e)  (4)  (G) , 
(e)(4)(H),  (e)(4)  (I),  and  (f). 

(2)  Authority.  5  U.S.C.  552a(k)(2). 

(3)  Reasons.  This  exemption  is  neces¬ 
sary  to  insure  the  proper  enforcements 
of  civil  laws,  and  the  activities  of  the 
courts,  Department  of  Housing  and 
Urban  Development  and  the  Department 
of  Justice. 

(b)  12001  Inspection  General  Records. 

(1)  Exemption.  This  system  of  rec¬ 
ords  is  exempt  from  the  following  pro¬ 
visions  of  5  U.S.C.  552a:  (c)  (3),  (d),  (e) 

(4)  (G).  (e)  (4)  (H),  (e)  (4)  (I),  and  (f) ; 
provided,  however,  that  if  any  individual 
is  denied  any  right,  privilege,  or  benefit 
that  he  would  otherwise  be  entitled  to  by 
Federal  law,  or  for  which  he  would 
otherwise  be  eligible,  as  a  result  of  the 
maintenance  of  such  material,  such 
material  shall  be  provided  to  the  in¬ 
dividual,  except  to  the  extent  that  the 
disclosure  would  reveal  the  Identity  of 
a  source  who  furnished  information  to 
the  government  under  an  expressed 
promise  of  confidentiality,  or  if  prior  to 
September  27,  1975,  a  source  who  fur¬ 
nished  information  to  the  government 
under  an  implied  promise  of  confiden¬ 
tiality. 

(2)  Authority.  5  U.S.C.  552a (k)  (2). 

(3)  Reasons.  Granting  individuals  ac¬ 
cess  to  information  collected  while  an 
Inspector  General  inquiry  is  in  progress 
could  interfere  with  the  just,  thorough, 
and  timely  resolution  of  the  complaint 
or  Inquiry  and  could  possibly  enable  in¬ 
dividuals  to  conceal  wrongdoing  or  mis¬ 
lead  the  inquiring  officer.  Disclosure 
could  result  in  the  concealment,  destruc¬ 
tion,  or  fabrication  of  evidence  and  docu¬ 
ments.  Disclosure  might  also  subject 
sources,  witnesses  and  their  families  to 
harassment  or  intimidation.  It  is  also 
essential  that  the  identities  of  all  in¬ 
dividuals  who  furnish  Information  in 
confidence  be  protected,  even  after  the 
inquiry  has  been  completed,  to  insure 
that  information  is  furnished  during  the 
inquiry  in  the  free  and  open  manner 
essential  to  resolve  the  matter  in  a  just, 
thorough,  and  timely  manner.  Permit¬ 
ting  individuals  access  to  that  infor¬ 
mation  which  would  identify  these 
sources,  would  subject  the  sources  and 
their  families  to  possible  retribution  and 
harassment  and  could  cause  individuals 
not  to  seek  redress  for  wrongs  through 
Inspector  General  channels  from  fear  of 
similar  retribution  or  harassment.  The 
exemption  of  the  individuals  right  of 
access  to  his  records  and  the  reasons 
therefore  necessitate  the  exemption  of 
this  system  from  the  requirements  of  the 
above  cited  provisions. 
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(c)  04002  Civilian  Personnel  Occupa¬ 
tional  and  Suitability  Employment 
Examinations. 

(1)  Exemptions.  Parts  of  this  system 
of  records  are  exempt  from  the  follow¬ 
ing  provisions  of  5  U.S.C.  552a:  (c)(3), 

(d).  (e)(4)(G),  (e)(4)(H),  (e)(4)  (I) 
and  (f) . 

(2)  Authority:  5  U.S.C.  552a(k)  (5) 

and  (6). 

(3)  Reasons.  Replies  to  qualification 
and  suitability  inquiries  are  secured  in 
confidence  and  are  needed  to  determine 
qualifications  and  suitability  for  civilian 
employment.  Test  material  used  in  de¬ 
termining  qualifications  cannot  be  ex¬ 
posed  in  order  to  be  fair  to  all  candidates. 

(d)  05302  Air  Force  Academy  Candi- 
-  date  System. 

(1)  Exemption.  This  system  of  records 
(Candidate  Evaluation  Record,  Liaison 
Officer  Evaluation,  Letter  of  Evaluation 
from  High  School  or  College,  and  Drug 
Abuse  Certificate)  is  exempted  from  the 
following  provisions  of  5  U.S.C.  552a: 

(d) ,  (e)  (4)  (H)  and  (f). 

(2)  Authority.  5  U.S.C.  552a(k)(5). 

(3)  Reasons.  The  information  con¬ 
tained  in  these  documents  is  considered 
relevant  and  necessary  for  making  a 
judicious  determination  as  to  the  quali¬ 
fications,  eligibility,  and  suitability  of 
cadets  for  graduation  and  for  commis¬ 
sioning  as  officers  in  the  United  States 
Air  Force. 

(e)  12401  Investigate  Applicant  Proc¬ 
essing  Records. 

(1)  Exemption.  This  system  is  ex¬ 
empted  from  the  following  provisions 
of  5  U.S.C:  552a:  (c)(3),  (d),  (e)(4) 
(G),  (e)(4)(H),  (e)(4)  (I)  and  (f),  but 
only  to  the  extent  that  the  disclosure  of 
such  material  would  reveal  the  identity 
of  a  source  who  furnished  Information 
to  the  Government  under  an  expressed 
promise  that  the  identity  of  a  source 
would  be  held  in  confidence,  or  prior  to 
September  27,  1975,  under  an  implied 
promise  that  the  identity  of  the  source 
would  be  held  in  confidence. 

(2)  Authority.  5  U.S.C.  552a(k)(5). 

(3)  Reasons.  Granting  individuals  ac¬ 
cess  to  the  information  which  would 
identify  those  sources  which  furnished 
information  in  confidence  during  Air 
Force  Office  of  Special  Investigations 
(AFOSI)  applicant  inquiries  could  seri¬ 
ously  affect  the  overall  integrity  of  the 
applicant  process.  Out  of  fear  of  retalia¬ 
tion,  exposure,  or  other  action,  sources 
could  refuse  to  furnish  information  in 
the  frank  and  open  manner  essential  to 
determine  the  full  qualification  of  appli¬ 
cants.  It  is  essential  that  only  qualified 
personnel  be  selected  for  AFOSI  duties 
in  order  to  insure  the  integrity  of  the 
AFOSI  personnel  program.  The  exemp¬ 
tion  of  the  individual’s  right  of  access  to 
his  records  therefore,  necessitates  the  ex¬ 
emption  of  this  system  of  records  from 
the  requirement  of  the  above  cited  pro¬ 
visions. 

(f)  12406,  20503,  20505  Security  Files. 

(1)  Exemption.  Parts  or  all  of  the 

listed  records  systems  are  exempted 
from  the  following  provisions  of  5  U.S.C. 
552a:  (c)(3),  (d),  (e)(4)  (G),  (e)  (4)(H), 

(e) (4)  (I),  and  (f)  (Security  and  Re¬ 


lated  Investigative  Records,  Security 
Case  Files,  Special  Security  Files),  but 
only  to  the  extent  that  the  disclosure  of 
such  material  would  reveal  the  Identity 
of  a  source  who  furnished  information  to 
the  Government  under  an  expressed 
promise  that  the  identity  of  a  source 
would  be  held  in  confidence,  or  prior  jo 
September  27,  1975,  under  an  implied 
promise  that  the  identity  of  the  source 
would  be  held  in  confidence. 

(2)  Authority.  5  U.S.C.  552a(k)(5). 

(3)  Reasons.  Granting  individuals  ac¬ 
cess  to  the  information  which  would 
identify  those  sources  who  furnished  in¬ 
formation  in  confidence  on  personnel  se¬ 
curity  and  related  investigations  could 
seriously  interfere  with  the  proper  con¬ 
duct  and  adjudication  of  such  matters. 
Out  of  fear  of  retaliation,  exposure,  or 
other  action,  sources  could  refuse  to  fur¬ 
nish  pertinent  information  in  the  frank 
and  open  manner  essential  to  determine 
what  specific  areas  a  given  investigation 
should  be  expanded  in  order  to  fully 
develop  or  resolve  allegations  of  question¬ 
able  conduct.  It  is  essential  that  all  such 
allegations  be  fully  resolved  as  soon  as 
possible  to  insure  that  no  individual  is 
wrongfully  denied  access  to  installations 
or  classified  material.  These  records  are 
compiled  for  the  purpose  of  determining 
suitability,  eligibility,  or  qualification  for 
Federal  civilian  employment,  military 
service,  and  Federal  contracts. 

(g)  03506,  03508  Air  Force  Personnel, 
Testing  Material. 

(1)  Exemptions.  Parts  or  all  of  the 

listed  records  systems  are  exempted  from 
the  following  provisions  of  5  U.S.C.  552a; 
(c)(3),  (d),  (e)(4)(G),  (e)(4)(H), 

(e)  (4)  (I)  and  (f)  (Air  Force  Personnel 
Test  851,  Test  Answer  Cards;  Armed 
Services  Vocational  Aptitude  Battery 
(ASVAB)  Test  Cards;  Historical  Airman 
Promotion  Master  Test  File  (MTF).) 

(2)  Authority.  5  U.S.C.  522a(k)(6). 

(3)  Reasons.  This  exemption  is  neces¬ 
sary  to  protect  the  integrity,  objectivity 
and  equity  of  the  promotion  testing  sys¬ 
tems  and  The  Armed  Services  Enlisted 
Accessions  Testing  System,  and  to  insure 
safeguarding  of  promotion  test  questions 
and  responses. 

(h)  01103,  03001,  03502  Air  Force  Acad¬ 
emy  Cadet  Records. 

(1)  Exemption.  Parts  of  the  listed  rec¬ 
ords  systems  are  exempted  from  the  fol¬ 
lowing  provisions  of  5  U.S.C.  552a:  (d), 
(e)  (4)  (H)  and  (f)  (Class  Committee 
Product;  Military  and  Leadership  Order 
of  Merit  System;  Cadet  Personnel  Rec¬ 
ords  System:  Master  Cadet  Personnel 
Record  (RR /Historical) ;  Master  Cadet 
Personnel  Record  (RR /Active) .) 

(2)  Authority.  5  U.S.C.  552a(k)(7). 

(3)  Reasons.  This  exemption  is  con¬ 
sidered  necessary  in  order  to  maintain 
the  candor,  integrity,  and  frankness  of 
comments  which  are  considered  neces¬ 
sary  to  properly  evaluate  a  cadet  for 
commissioning  in  the  United  States  Air 
Force. 

(i)  03501  Personnel  Files  on  General 
Officers  (GOs)  and  Colonels  Assigned 
to  General  Officer  Positions. 

(1)  Exemption.  This  system  of  records 
is  exempt  from  the  following  provisions 


of  5  U.S.C.  552a:  (c)  (3) ,  (d) .  (e)  (4)  (G) , 
(e)  (4)  (H) ,  (e)  (4)  (I)  and  (f ) . 

(2)  Authority.  5  U.S.C.  552(k)(7). 

(3)  Reasons.  The  information  that  is 
exempt  from  disclosure  is  the  result  of 
the  Reserve  Initial  Brigadier  General 
Screening  Board.  This  information  is 
used  in  the  promotion  process  and  re¬ 
lease  would  compromise  the  selection 
process. 

(j)  03501  Effectiveness /Performance 
Reporting  Systemr. 

(1)  Exemptions.  Such  portions  of  this 

system  as  pertain  to  completed  Air  Force 
Forms  705,  “Lieutenant  Colonel  Promo¬ 
tion  Potential  Evaluation,”  and  Air  Force 
Forms  706,  “Colonel  Promotion  Recom¬ 
mendation  Report,”  are  exempt  from 
the  following  provisions  of  5  U.S.C.  552a: 
(c)(3),  (d),  (e)(4)(G),  (e)(4)(H), 

(e)  (4)  (I)  and  (f). 

(2)  Authority.  5  U.S.C.  552a(k)  (7) . 

(3)  Reasons.  This  exemption  is  re¬ 
quired  to  insure  that  selection  boards  are 
provided  with  candid  evaluations  of  the 
potential  of  officers  being  considered  for 
promotion  to  the  grades  of  Colonel  and 
Brigadier  General. 

Effective  date:  This  part  shall  be  effec¬ 
tive  September  27,  1975. 

Dated:  August  14,  1975. 

J  W.  Plummer, 

Acting  Secretary  of  the  Air  Force. 
Dated:  August  15, 1975. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives  OASD  ( Comptroller ) . 

[FR  Doc.75-22216  Filed  8-25-75:8:45  am) 


Department  of  the  Army 
[  32  CFR  Part  505  ] 

[Army  Regulation  340-21) 

PERSONAL  PRIVACY  AND  RIGHTS  OF  IN¬ 
DIVIDUALS  REGARDING  THEIR  PER¬ 
SONAL  RECORDS 

Proposed  Rulemaking 

Notice  is  hereby  given  that  the  Sec¬ 
retary  of  the  Army  proposes  to  amend  32 
CFR  Chapter  V  by  adding  Part  505  to 
implement  the  provisions  of  the  Privacy 
Act  of  1974  (Pub.  L.  93-579)  (5  U.S.C. 
552a).  Part  505  establishes  rules  to  pre¬ 
serve  the  privacy  of  individuals  on  whom 
the  Department  of  the  Army  maintains 
records. 

Portions  of  Part  505  of  significance  to 
the  public  are  as  follows: 

Section  505.2  establishes  procedures 
whereby  an  individual  may  be  notified  at 
his  request  whether  the  Department  of 
the  Army  maintains  a  record  on  him, 
may  request  and  be  provided  access  to 
personal  records,  and  request  amend¬ 
ment  of  records  pertaining  to  him. 

Section  505.3  provides  procedures  gov¬ 
erning  disclosures  of  records  containing 
personal  information  and  establishes 
procedures  for  accounting  for  dis¬ 
closures. 

Section  505.7  provides  rules  for  ex¬ 
empting  systems  of  records  from  some 
provisions  of  the  Act  and  §  505.9  identi¬ 
fies  the  systems  of  records  which  the 
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Secretary  of  the  Army  proposes  to  ex¬ 
empt. 

Any  person  interested  in  the  rules  pro¬ 
posed  herein  may  participate  in  this 
rulemaking  by  submitting  written  com¬ 
ments,  views,  or  arguments  to  The  Ad¬ 
jutant  General,  Headquarters,  Depart¬ 
ment  of  the  Army  (ATTN:  DAAG- 
AMR) ,  Washington,  D.C.  20314,  on  or  be¬ 
fore  September  27,  1975. 

Accordingly,  the  Secretary  of  the  Army 
hereby  proposes  to  add  to  32  CFR,  Chap¬ 
ter  V,  the  following  Part  505,  Personal 
Privacy  and  Rights  of  Individuals  Re¬ 
garding  Their  Personal  Records : 

PART  505 — PERSONAL  PRIVACY  AND 
RIGHTS  OF  INDIVIDUALS  REGARDING 
THEIR  PERSONAL  RECORDS 

Sec. 

505.1  General. 

505.2  Access  to  and  amendment  of  an  In¬ 

dividual's  records. 

505.3  Disclosure  of  personal  information  to 

other  agencies  and  individuals. 

505.4  Collection  of  personal  information 

from  individuals. 

505.5  Systems  of  records. 

505.6  Instructions  and  responsibilities  for 

preparing  record  system  notices. 

505.7  Exemptions. 

505.8  Instructions  for  completing  Depart¬ 

ment  of  the  Army  Form  4368-R. 

505.9  System  notices  and  exemption  rules 

for  army  systems  of  records. 

§  505.1  General. 

(a)  Purpose.  This  part  prescribes  poli¬ 
cies  and  procedures  for: 

(1)  Notifying  an  individual  whether 
an  Army  system  of  records  contains  a 
record  concerning  him. 

(2)  Verifying  the  identity  of  an  in¬ 
dividual  requesting  records  or  informa¬ 
tion  about  himself  before  they  are  fur¬ 
nished  to  him. 

(3)  Providing  access  to  or  copies  of 
records  to  an  individual  in  response  to 
his  request. 

(4)  Reviewing  a  request  from  an  in¬ 
dividual  to  amend  a  record,  taking  ac¬ 
tion  thereon  promptly,  and  acting  on  an 
appeal  from  an  initial  adverse  determi¬ 
nation  as  the  result  of  an  amendment 
request. 

(5)  Collecting,  safeguarding,  main¬ 
taining,  using,  and  disclosing  personal 
Information. 

(6)  Exempting  certain  systems  of 
records  from  provisions  of  this  regula¬ 
tion. 

(7)  Assuring  privacy  protection  to  in¬ 
dividuals  who  furnish  information  under 
promises  of  confidentiality. 

(b)  General  policies.  Department  of 
the  Army  policy  is: 

(1)  To  protect  the  personal  privacy 
of  individuals  from  unwarranted  inva¬ 
sion. 

(2)  To  permit  an  individual  to  know 
what  records  the  Army  has  on  him,  to 
have  access  to  or  copies  of  such  records 
or  portions  thereof,  and  to  request 
amendment  of  such  records,  whenever 
exemptions  do  not  apply  or  there  is  no 
significant,  legitimate  governmental 
purpose  to  be  served  by  claiming  an 
exemption. 

(3)  To  collect,  maintain,  use,  or  dis¬ 
close  any  record  of  identifiable  personal 


information  only  for  a  necessary  and 
lawful  purpose. 

(4)  To  ensure  that  the  information  is 
timely  and  accurate  for  the  intended  use 
and  is  adequately  safeguarded  to  prevent 
misuse  or  unauthorized  access/disclosure. 

(5)  To  act  on  all  requests  promptly, 
accurately,  and  fairly.  Delay  will  not  be 
permitted  even  though  requests  appear  to 
be  minor  in  nature. 

(c)  Applicability  and  scope.  (1)  This 
part  applies  to  all  requests  received  by 
elements  of  the  Department  of  the  Army 
from  individuals  who  seek  information 
on,  access  to,  or  amendment  of  records 
pertaining  to  them  under  the  provisions 
of  the  Privacy  Act  of  1974.  It  governs  the 
collection,  maintenance,  use,  and  disclo¬ 
sure  of  personal  information  by  all  ele¬ 
ments  of  the  Department  of  the  Army, 
including  the  Army  Reserve  and  the 
Army  National  Guard. 

(2)  When  the  Army  provides  by  a  con¬ 
tract  for  the  operation  by  or  on  behalf 
of  the  Army  of  a  system  of  records  to 
accomplish  an  Army  function,  the  Army 
shall,  consistent  with  its  authority,  cause 
the  requirements  of  this  regulation  to  be 
applied  to  such  system.  The  criminal 
sanctions  specified  by  section  3 (i)  of  the 
Privacy  Act  may  be  applicable  to  such  a 
contractor  or  employee  thereof. 

(d)  Statutory  authority.  The  Privacy 
Act  of  1974  (5  U.S.C.  552a)  is  the  statu¬ 
tory  basis  for  the  Army  privacy  program. 
The  Act  assigns  overall  Government- 
wide  responsibilities  for  implementation 
to  the  Office  of  Management  and  Budget 
(OMP)  and  specific  responsibilities  to  the 
Civil  Service  Commission  (CSC)  and  the 
General  Services  Administration  (GSA) . 
These  agencies  have  issued  detailed  reg¬ 
ulations  and  guidance  for  Government¬ 
wide  implementation  of  The  Privacy  Act. 
Within  the  Department  of  Defense 
(DOD) ,  the  Act  is  further  implemented 
by  DOD  Directive  5400.11,  Personal  Pri¬ 
vacy  and  Rights  of  Individuals  Regard¬ 
ing  Their  Personal  Records. 

(e)  Explanation  of  terms — (1)  Access 
and  amendment  refusal  authority  (AA 
RA ).  The  Army  Staff  agency  head  or 
major  Army  commander  designated  sole 
authority  by  this  rule  to  deny  access  to  or 
refuse  amendment  of  records  in  his  as¬ 
signed  area  of  proponency  or  functional 
specialization  (see  paragraph  (g)  of  this 
section) . 

(2)  Form  proponent.  The  Army  Staff 
agency  head,  major  Army  commander,  or 
other  commander  who,  normally  be  reg¬ 
ulation  or  other  issuance,  prescribes 
the  design,  content,  and  use  of  a  form 
or  format  used  to  collect  personal  infor¬ 
mation  from  individuals. 

(3)  Individual.  A  citizen  of  the  United 
States  or  an  alien  lawfully  admitted  for 
permanent  residence,  whether  a  member 
or  former  member  of  the  US  armed  forces 
or  employee  thereof.  The  term  “individ¬ 
ual”  does  not  Include  a  decendent.  For 
purposes  of  this  rule,  the  parent  of  any 
minor,  or  -the  legal  guardian  of  any  in¬ 
dividual  who  has  been  declared  to  be  in¬ 
competent  due  to  physical  or  mental  in¬ 
capacity  or  age  by  a  court  of  competent 
jurisdiction,  may  act  on  behalf  of  the 


individual  provided  he  supplies  proper 
verification  of  his  status. 

(4)  Maintain.  The  collection,  use, 
maintenance,  or  dissemination  of  rec¬ 
ords. 

(5)  Record.  Any  item,  collection  or 
grouping  of  information  about  an  indi¬ 
vidual  that  is  maintained  by  any  element 
of  the  Army,  including,  but  not  limited 
to,  his  home  address,  home  telephone 
number,  social  security  number  <SSN>, 
education,  financial  transactions,  medical 
history,  duty  performance  characteristics 
(to  include  personal  and  behavioral), 
and/or  criminal  or  employment  history: 
and  that  contains  his  name,  SSN,  symbol, 
code,  or  other  identifying  particular  as¬ 
signed  to  the  individual,  such  as  finger¬ 
print,  voice  print,  or  photograph. 

(6)  Routine  use.  The  disclosure  of  a 
record,  or  the  use  of  such  record,  outside 
the  Department  of  Defense  for  a  corollary 
purpose  compatible  with  the  purpose  for 
which  the  information  was  collected,  and 
which  is  appropriate  and  necessary  for 
the  efficient  conduct  of  the  Government. 
Routine  use  encompasses  not  only  com¬ 
mon  and  ordinary  uses,  but  also  all 
proper  and  necessary  uses  of  the  record, 
even  if  such  use  occurs  infrequently.  See 
|  505.6(g). 

(7)  Statistical  record.  A  record  in  a 
system  of  records  maintained  for  statis¬ 
tical  research  or  reporting  purposes  only, 
and  not  used  in  whole  or  in  part  to  make 
any  determination  about  an  identifiable 
individual,  except  as  provided  by  13 
U.S.C.  8. 

(8)  System  manager.  An  Army  Staff 
agency  head,  major  Army  commander,  or 
other  commander  who — 

(i)  By  statute,  Army  Regulation,  or 
other  Headquarters,  Department  of  the 
Army  (HQDA)  issuance,  prescribes  the 
establishment  and  maintenance  of  an 
Army-wide  system  of  records,  or  a  func¬ 
tion  or  process  which  results  in  the  es¬ 
tablishment  of  an  Army-wide  system  of 
records. 

(ii)  By  regulation  or  other  issuance, 
prescribes  the  establishment  and  main¬ 
tenance  of  an  agency,  command,  or  in¬ 
stallation-unique  system  or  records,  or 
prescribes  a  function  or  process  which 
results  in  the  establishment  of  such  a 
system  of  records. 

(9)  System  of  records.  A  group  of  rec¬ 
ords  under  the  control  of  any  element  of 
the  Army  from  which  information  is  re¬ 
trieved  by  the  name  or  SSN  of  an  indi¬ 
vidual  or  by  some  other  identifying  num¬ 
ber,  symbol,  code,  or  identifying  particu¬ 
lar  assigned  to  the  individual.  A  group¬ 
ing  or  files  series  of  records  arranged 
chronologically  or  subjectively,  which  is 
not  retrieved  by  individual  identifier,  is 
not  a  system  of  records  as  defined  herein, 
even  though  individual  information 
could  be  retrieved  by  such  an  identifier 
(such  as  through  case  or  paper-by¬ 
paper  search) . 

(f)  Responsibilities — (1)  The  Adjutant 
General.  The  Adjutant  General  is  re¬ 
sponsible  for  staff  direction  of  the  Army 
privacy  program.  In  consultation  with 
the  Secretary  of  the  Army’s  General 
Counsel,  he  formulates  overall  policy1 
concerning  the  Army  privacy  program. 
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(2)  Director,  Management  Informa¬ 
tion  Systems.  The  Director,  Management 
Information  Systems,  is  responsible  for 
promulgating  instructions  for  safeguard¬ 
ing  automated  systems  containing  per¬ 
sonal  information,  to  include  issuance  of 
guidance  concerning  the  preparation  of 
privacy  safeguard  plans,  systems  syn¬ 
opses,  and  certifications  required  in  the 
design,  procurement  and  operation  of 
all  automated  systems  involving  per¬ 
sonal  information. 

(3)  Heads  of  Army  Staff  Agencies  and 
Field  Commanders,  (i)  The  Administra¬ 
tive  Assistant  to  the  Secretary  of  the 
Army  and  the  Director  of  the  Army  Staff 
are  responsible  for  supervision  and  ex¬ 
ecution  of  the  privacy  program  in  their 
respective  administrative  areas  in  Head¬ 
quarters,  Department  of  the  Army. 

(ii)  Heads  of  Army  Staff  Agencies, 
Field  Operating  Agencies,  and  com¬ 
manders  of  major  Army  commands  and 
subcommands  are  responsible  for  super¬ 
vision  and  execution  of  the  privacy  pro¬ 
gram  in  their  areas  of  jurisdiction,  in¬ 
cluding  supervision  of  privacy  programs 
of  agencies,  installations,  and  activities 
under  their  command. 

(iii)  Commanders  of  subordinate 
commands,  installations,  and  activities 
are  responsible  for  supervision  and  ex¬ 
ecution  of  privacy  programs  in  all  ele¬ 
ments  under  their  jurisdiction. 

(4)  The  Deputy  Chief  of  Staff  for  Per¬ 
sonnel,  the  Chief  of  Engineers,  the  Judge 
Advocate  General,  the  Commander,  U.S. 
Army  Criminal  Investigation  Command, 
and  the  Commander,  U.S.  Army  Intelli¬ 
gence  Agency.  These  officials  are  dele¬ 
gated  the  Secretary  of  the  Army’s  au¬ 
thority  to  request  disclosure  of  records 
for  civil  and  criminal  law  enforcement 
purposes  from  any  agency  or  instrumen¬ 
tality  under  the  control  of  the  U.S.  See 
5  505.3(b)(7). 

(5)  Heads  of  Joint  Agencies  and  Com¬ 
mands.  The  heads  of  joint  agencies  and 
commands  for  which  the  Department  of 
the  Army  acts  as  executive  agent,  man¬ 
agement  agent,  or  administrative  agent, 
or  furnishes  administrative  support  or 
essential  management  control,  will  follow 
instructions  contained  in  this  rule.  Heads 
of  such  joint  agencies  and  commands  are 
responsible  for  the  supervision  and  ex¬ 
ecution  of  privacy  programs  in  subordi¬ 
nate  elements. 

(6)  Commander,  AAFES.  The  Com¬ 
mander,  Army-Air  Force  Exchange  Serv¬ 
ice  is  responsible  for  the  supervision  and 
execution  of  privacy  programs  within  his 
command  in  accordance  with  this  rule. 

(g)  Access  and  amendment  refusal  au¬ 
thorities  (.AAR A) . — (1)  General  respon¬ 
sibilities.  The  officials  indicated  in  para¬ 
graph  (g)  (2)  of  this  section  are  desig¬ 
nated  as  the  sole  Access  and  Amendment 
Refusal  Authorities  for  requests  sub¬ 
mitted  under  this  rule.  Each  AARA  is  re¬ 
sponsible  for  action  on  requests  for  ac¬ 
cess  to  or  amendment  of  records  referred 
by  commanders  under  the  provisions  of 
§  505.2.  Each  AARA  will  appoint  a  single 
point  of  contact  to  represent  him  on  mat¬ 
ters  concerned  with  access  denials  and 
amendment  refusals.  The  single  point  of 
contact  may  also  serve  as  the  privacy 


official  for  the  agency  (paragraph  (i)  of 
tills  section) .  The  names,  offices,  and  tele¬ 
phone  numbers  of  the  individuals  ap¬ 
pointed  as  single  points  of  contact  will  be 
furnished  to  HQDA  (DA  AG- AMR) 
Washington,  D.C.  20314. 

(2)  Assigned  areas  of  authority.  The 
AARA  are  assigned  authority  in  the  areas 
of  functional  specialization  listed  below. 
In  cases  where  requests  for  access  in¬ 
volve  information  related  to  actual  or 
potential  litigation  against  the  United 
States,  the  request  will  be  coordinated 
with  The  Judge  Advocate  General  (Liti¬ 
gation  Division),  HQDA  (DAJA-LT). 

(i)  The  Adjutant  General  is  authorized 
to  act  on  requests  for  access  to  or  amend¬ 
ment  of : 

(a)  Personnel  records  of  retired,  sep¬ 
arated,  or  Reserve  component  military 
personnel. 

(b)  Dependent  school  student  records. 

(c)  Nonappropriated  fund  employees, 
except  for  employees  of  the  Army  and 
Air  Force  Exchange  Service. 

(ii)  Commander,  US  Army  Military 
Personnel  Center  is  authorized  to  act  on 
requests  for  access  to  or  amendment  of 
records  of  active  duty  military  personnel. 

(iii)  The  Surgeon  General  is  author¬ 
ized  to  act  on  requests  for  access  to  or 
amendment  of  medical  records. 

(iv)  The  Deputy  Chief  of  Staff  for  Per¬ 
sonnel  is  authorized  to  act  on  requests 
for  access  to  or  amendment  of  records  of 
active  civilian  employees  (requests  for 
amendments  of  records  of  former  em¬ 
ployees  will  be  acted  on  by  the  Director, 
Bureau  of  Manpower  Information  Sys¬ 
tems,  US  Civil  Service  Commission,  1900 
E  St.,  Washington,  D.C.  20415) .  The  Dep¬ 
uty  Chief  of  Staff  for  Personnel  is  also 
authorized  to  act  on  requests  for  access 
to  or  amendment  of  Military  Police 
records. 

(v)  The  Inspector  General  and  Auditor 
General  are  authorized  to  act  on  requests 
for  access  to  or  amendment  of  Inspector 
General,  safety  investigatory,  and  Army 
audit  records. 

(vi)  The  Chief  of  Chaplains  is  author¬ 
ized  to  act  on  requests  for  access  to  or 
amendment  of  ecclesiastical  records. 

(vii)  Commander  US  Army  Criminal 
Investigation  Command  is  authorized  to 
act  on  requests  for  access  to  or  amend¬ 
ment  of  records  on  criminal  investiga¬ 
tions  (to  include  military  police  reports 
which  are  part  of  criminal  investigation 
reports)  and  investigations  in  progress. 

(viii)  Commander,  US  Army  Intelli¬ 
gence  Agency  is  authorized  to  act  on  re¬ 
quests  for  access  to  or  amendment  of  all 
US  Army  intelligence  investigative  rec¬ 
ords. 

(ix)  The  Comptroller  of  the  Army  is 
authorized  to  act  on  requests  for  access 
to  or  amendment  of  financial  records. 

(x)  Commander  US  Army  Materiel 
Command  is  authorized  to  act  on  re¬ 
quests  for  access  to  or  amendment  of 
records  on  personnel  of  Army  contrac¬ 
tors,  except  for  those  described  in  (xvi) 
below. 

(xi)  Commander,  Military  Traffic 
Management  Command  is  authorized  to 
act  on  requests  for  access  to  or  amend¬ 
ment  of  transportation  records. 


(xii)  Commander,  Army  and  Air  Force 
Exchange  Service  is  responsible  for  act¬ 
ing  on  requests  for  access  to  or  amend¬ 
ment  of  records  pertaining  to  personnel 
of  his  command. 

(xiii)  Chief,  National  Guard  Bureau 
is  authorized  to  act  on  requests  for  ac¬ 
cess  to  or  amendment  of  records  per¬ 
taining  to  personnel  of  the  National 
Guard. 

(xiv)  The  Administrative  Assistant  to 
the  Secretary  of  the  Army  is  authorized 
to  act  on  requests  for  access  to  or  amend¬ 
ment  of  records  maintained  by  the  Sec¬ 
retariat. 

(xv)  The  Judge  Advocate  General  is 
authorized  to  act  on  requests  for  access 
to  or  amendment  of  records  within  the 
purview  of  (i)  through  (xiv)  above  in 
cases  involving  potential  litigation  in 
which  the  United  States  has  an  interest. 

(xvi)  The  Chief  of  Engineers  is  au¬ 
thorized  to  act  on  requests  for  access  to 
or  amendment  of  records  pertaining  to 
civil  works,  military  construction,  engi¬ 
neer  procurement,  and  ecology  contractor 
personnel,  and  other  engineer  matters 
not  under  the  purview  of  another  AARA. 
In  addition,  he  is  authorized  to  act  on 
requests  for  access  to  or  amendment  of 
records  pertaining  to  cases  involving  civil 
works  potential  litigation  in  which  the 
United  States  has  an  interest. 

(h)  DA  Privacy  Review  Board.  There 
is  hereby  established  a  Department  of 
the  Army  (DA)  Privacy  Review  Board. 
Membership  of  the  Board  will  consist  of 
the  Administrative  Assistant  (AA)  to  the 
Secretary  of  the  Army,  The  Adjutant 
General  (TAG)  and  the  Judge  Advocate 
General  (TJAG).  Each  Access  and 
Amendment  Refusal  Authority  (includ¬ 
ing  the  AA,  TAG  and  TJAG)  will  serve 
as  a  nonvoting  member  when  the  Board 
is  considering  matters  in  his  area  of 
functional  specialization.  Where  a  mat¬ 
ter  comes  before  the  Privacy  Board  which 
is  the  proper  concern  of  an  element  of 
the  staff  which  is  not  a  member  of  the 
Board,  that  element  will  be  permitted  to 
participate  in  the  resolution  of  such  mat¬ 
ter  as  a  nonvoting  member  of  the  Board. 
The  Adjutant  General  will  serve  as 
Chairman  of  the  Board.  Functions  of  the 
Board  include: 

(1)  To  act  on  behalf  of  the  Secretary 
of  the  Army  in  deciding  all  appeals  of 
refusal  to  amend  submitted  in  accord¬ 
ance  with  §  505.2. 

(2)  To  review  all  requests  for  exemp¬ 
tions  made  in  accordance  with  §  505.7 
and  submit  its  recommendation  to  the 
Secretary. 

(3)  To  provide  advice  on  the  formula¬ 
tion  of  policy  concerning  the  Army  Pri¬ 
vacy  Program. 

(4)  To  act  on  such  other  matters  as 
may  be  referred  to  the  Board. 

(i)  Designation  of  privacy  officials. 
Heads  of  Army  staff  agencies  and  com¬ 
manders  of  major  Army  commands  and 
subordinate  commands,  installations, 
and  activities  exercising  general  courts 
martial  jurisdiction  will  designate  a  pri¬ 
vacy  official  to  carry  out  required  privacy 
functions  for  the  agency  head/com¬ 
mander.  In  addition,  privacy  coordina¬ 
tors  may  be  designated  at  such  subordi- 
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nate  commands  and  organizational  sub¬ 
divisions  as  are  necessary  to  accomplish 
privacy  responsibilities.  One  copy  of  all 
orders  designating  privacy  officials  for 
Army  Staff  agencies  and  major  com¬ 
mands  will  be  furnished  HQDA  (DAAG- 
AMR),  Washington,  D.C.  20314. 

<j)  Duties  of  privacy  officials.  Privacy 
officials  designated  in  accordance  with 
paragraph  (i)  of  this  section  will  serve 
as  staff  officers  on  privacy  matters  for 
agency  heads/commanders.  The  duties  of 
a  privacy  official  include: 

<1)  Serving  as  a  focal  point  for  all 
privacy  requests. 

(2)  Ensuring  that  all  systems  of  rec¬ 
ords  subject  to  this  rule  are  described  by 
published  system  notices;  such  systems 
are  not  modified  or  otherwise  expanded 
prior  to  public  notification;  and  dis¬ 
closure  of  personal  information  and  ac¬ 
counting  records  thereof  are  in  accord¬ 
ance  with  this  rule. 

(3)  Maintaining  liaison  with  forms 
and  reports  management  officials  to  en¬ 
sure  that  privacy  statements  are  pre¬ 
pared  and  issued  for  all  forms,  formats, 
and  questionnaires  subject  to  this  rule. 

(4)  Developing  and  providing,  or  ar¬ 
ranging  for  the  provision  of  a  privacy 
training  program  for  all  personnel  in¬ 
volved  in  the  design,  development,  cus¬ 
tody,  maintenance,  and  use  of  a  system 
of  records. 

(5)  Maintaining  narrative  and  sta¬ 
tistical  data  for  preparation  of  the  an¬ 
nual  report  required  by  paragraph  (k). 

(k)  Annual  report.  The  heads  of 
Army  Staff  agencies,  commanding  gen¬ 
erals  of  major  Army  commands,  heads 
of  joint  agencies  and  commands,  and  the 
Commander,  Army  and  Air  Force  Ex¬ 
change  Service  will  prepare  and  submit 
to  HQDA  (DAAG-AMR)  Washington, 
D.C.  20314,  a  consolidated  report  on  pri¬ 
vacy  program  activities  in  their  areas  of 
responsibility.  The  report  will  be  for  the 
calendar  year  ending  December  31,  and 
will  be  submitted  in  duplicate  to  reach 
HQDA  by  March  1,  annually.  Reports 
Control  Symbol  DD  (A)  1379  applies. 
Annual  reports  will  include,  but  not  be 
limited  to  the  following : 

(l)  Summary.  A  brief  management 
summary  of  the  status  of  actions  taken 
to  comply  with  this  rule,  the  results  of 
these  efforts,  difficulties  and  problems  en¬ 
countered,  and  recommendations  with 
full  justification  for  changes  in  legisla¬ 
tion,  policies,  or  procedures. 

(2)  Accomplishments.  A  summary  of 
major  accomplishments,  such  as  im¬ 
provements  in  information  practices  and 
safeguards. 

(3)  Plans.  A  summary  of  major  plans 
for  privacy  activities  in  the  coming  year; 
for  example,  areas  of  planned  emphasis, 
strengthened  safeguards,  and  training 
programs. 

(4)  Exemptions.  A  list  of  systems 
or  segments  thereof  in  custody  of  the 
agency  or  command  which  are  exempted 
from  provisions  of  this  rule  pursuant  to 
§  505.7,  the  estimated  total  number  of 
records  in  each  such  system  or  segment 
thereof,  and  the  reason  for  the  exemp¬ 
tion.  (For  manual  records,  count  file 
folders,  cards,  or  similar  units;  for  auto¬ 


mated  records,  reflect  the  number  of  in¬ 
dividuals  on  whom  information  is  main¬ 
tained). 

(5)  Significant  changes  in  systems.  A 
summary  of  the  reasons  for  major 
changes  in  systems  or  segments  thereof; 
for  instance,  the  extent  to  which  review 
of  relevance  and  necessity  for  records 
has  resulted  in  elimination  of  all  or  por¬ 
tions  of  systems  of  records,  or  any  reduc¬ 
tion  in  the  number  of  individuals  on 
whom  records  are  maintained. 

(6)  Nonexempted  system.  A  listing  of 
the  nonexempted  systems  or  segments 
thereof  (subject  to  this  rule)  on  hand 
in  the  agency  or  command,  their  loca¬ 
tion,  and  the  estimated  number  of  rec¬ 
ords  at  each  location. 

(7)  Operational  experiences.  A  general 
description  of  operational  experiences, 
and  for  each  system  of  records,  the  actual 
or  estimated  number  of  individuals  who; 

(i)  Requested  information  on  the  ex¬ 
istence  of  records  pertaining  to  them. 

(ii)  Refused  to  provide  information  re¬ 
quested  by  the  Army. 

(iii)  Requested  access  to  their  records. 

(iv)  Requested  amendment  of  their 
records. 

(v)  Requested  review  of  an  initial  re¬ 
fusal  to  amend  their  records. 

(vi)  Sought  redress  through  the  courts. 

(8)  Costs.  The  actual  or  estimated 
cost  to  accomplish  all  actions  required  by 
(or  resulting  from  implementation  of) 
this  rule  during  the  reporting  year.  In 
developing  these  data,  cost  associated 
with  system  redesign,  programming,  ma¬ 
chine  time,  publication  development  and 
reproduction,  and  manpower  will  be 
identified  or  estimated  and  included. 

(1)  Rules  of  conduct.  Army  Staff 
agency  heads  and  commanders  at  all 
levels  will  assure  that  all  personnel,  in¬ 
cluding  government  contractors  or  their 
employees,  who  are  involved  in  the  de¬ 
sign,  development,  operation,  mainte¬ 
nance,  or  control  of  any  system  of  records 
defined  in  paragraph  (e)  (9)  of  this  sec¬ 
tion,  are  informed  of  all  requirements  to 
protect  the  privacy  of  individuals  who 
are  subjects  of  the  records.  The  follow¬ 
ing  sanctions  will  be  emphasized  to  all 
personnel: 

(1)  There  are  criminal  penalties  for 
knowingly  and  willfully  maintaining  a 
system  of  records  without  meeting  the 
notice  requirement  of  this  rule,  and  for 
disclosing  a  record  about  an  individual 
without  the  written  consent  or  the  writ¬ 
ten  request  of  that  individual,  or  unless 
disclosure  is  for  one  of  the  reasons  listed 
in  §  505.3(b). 

(2)  The  Department  of  the  Army  and 
its  responsible  officials  may  be  subject  to 
civil  suit  for  failure  to  comply  with  the 
Privacy  Act  as  implemented  by  this  rule. 

§  505.2  Access  to  and  amendment  of  an 
individual’s  records. 

(a)  General.  (1)  This  chapter  pre¬ 
scribes  those  procedures  whereby  an  in¬ 
dividual  may  determine  whether  records 
pertaining  to  him  exist  within  a  specific 
system  of  records,  request  access  to  such 
records  (including  the  accounting  of  dis¬ 
closures  maintained  pursuant  to  §  505.3) 


and  request  that  any  record  pertaining 
to  him  be  amended  because  it  is  not  ac¬ 
curate,  relevant,  timely  or  complete.  In 
order  that  an  individual  may  properly 
avail  himself  of  his  rights  to  determine 
the  existence  of  records  and  to  gain  ac- 
.cess,  Congress  has  required  the  publica¬ 
tion  in  the  Federal  Register  of  notices 
describing  the  various  systems  of  records 
maintained  by  the  Army.  See  §§  505.5, 
505.6  and  505.9.  It  is  therefore  impera¬ 
tive  that  an  individual  seeking  to  exer¬ 
cise  his  rights  first  consult  these  notices, 
discern  those  which  may  apply  to  him, 
and  then  reasonably  identify  the  systems 
in  any  correspondence  with  the  Army. 
This  will  insure  a  prompt  and  accurate 
response  from  the  Army.  Individuals  de¬ 
siring  assistance  in  identifying  the  sys¬ 
tems  which  may  have  records  pertaining 
to  them  should  contact  HQDA  (DAAG- 
AMR)  ,  Washington,  D.C.  20314. 

(2)  If  a  request  is  the  proper  concern 
of  another  office  within  the  Department 
of  Defense,  it  will  promptly  be  referred 
to  that  office  for  action  and  the  indi¬ 
vidual  will  be  advised  accordingly.  Only 
where  such  a  referral  would  significantly 
disrupt  agency  activities,  e.g.,  where  the 
request  involves  a  multitude  of  systems 
in  a  variety  of  locations,  will  the  individ¬ 
ual  be  asked  to  resubmit  his  request  to 
the  appropriate  officials.  Any  applicable 
time  periods  will  commence  upon  receipt 
of  the  request  by  the  proper  office. 

(3)  If  a  request  is  the  proper  concern 
of  another  agency,  it  (along  with  copies 
of  any  records  which  may  be  involved) 
will  promptly  be  referred  to  that  agency. 
The  individual  will  be  advised  of  this  re¬ 
ferral  and  whether  the  other  agency  de¬ 
sires  that  he  resubmit  his  request  directly 
to  it  or  whether  it  will  process  the  re¬ 
quest  without  any  further  correspond¬ 
ence. 

(4)  The  time  periods  specified  by  this 
section  will  be  extended  only  for  good 
cause  shown  and  with  the  approval  of 
the  General  Counsel  acting  on  behalf  of 
the  Secretary  of  the  Army,  unless  the  in¬ 
dividual  voluntarily  agrees  to  an  exten¬ 
sion.  Any  such  agreement  will  be  con¬ 
firmed  in  writing  by  the  appropriate  offi¬ 
cial. 

(b)  Requests  to  determine  the  exist¬ 
ence  of  records.  Upon  request,  written  or 
oral,  an  individual  (or  his  authorized 
representative)  will  be  informed  whether 
a  particular  system  of  records  contains 
any  record  pertaining  to  him.  The  re¬ 
questing  individual  need  only  reasonably 
identify  the  system  which  he  desires 
searched  and  provide  any  identifying  in¬ 
formation  which  may  be  necessary  to 
effect  a  proper  search.  Requests  will  be 
submitted  to  the  official  identified 
through  the  system  notice,  who  will  an¬ 
swer  such  requests  within  ten  working 
days  of  receipt  and  inform  the  indi¬ 
vidual  how  to  request  access  to  any  rec¬ 
ord  located.  See  paragraph  (d)(1)  (ii). 
No  fee  will  be  charged  for  this  search. 

(c)  Requests  for  access  and  the  Free¬ 
dom  of  Information  Act  (32  CFR  Part 
518) .  (1)  Where  an  individual  (or  his  au¬ 
thorized  representative)  requests  disclo¬ 
sure  of  records,  the  Privacy  Act  and  this 
rule  apply  only  if  those  records: 
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(1)  Pertain  to  him; 

(ii)  Are  contained  in  a  system  of  rec¬ 
ords,  as  defined  in  $  505.1(e)  (9) ; 

(iii)  Are  retrieved  by  reference  to  his, 
as  opposed  to  some  third  party’s,  identity. 
Requests  for  the  above  records  are  to  be 
processed  in  accordance  with  this  rule 
whether  or  not  they  are  sought  under 
the  Freedom  of  Information  Act  (32  CFR 
Part  518)  or  whether  the  individual  spe¬ 
cifically  identifies  them  as  subject  to  the 
Privacy  Act.  Requests  for  all  other  rec¬ 
ords  will  be  processed  in  accordance  with 
32  CFR  Part  518. 

(2)  If  the  individual  has  not  reason¬ 
ably  identified  the  records  he  desires  and 
it  is  unclear  into  which  of  the  above 
categories  his  request  falls,  the  individual 
will  be  contacted  immediately  to  clarify 
his  request. 

(d)  Procedure  for  requesting  access. 

(1)  An  individual  who  desires  access  to 
any  records  pertaining  to  him  within  a 
system  of  records  will: 

(1)  Determine  the  existence  of  such 
records,  as  provided  in  paragraph  (b) 
of  this  section; 

(ii)  If  records  are  determined  to  exist, 
submit  a  written  request  as  indicated  in 
the  applicable  system  notice.  See  §  505.6 
(u) .  (The  name  and  address  of  this  offi¬ 
cial  will  be  provided  in  the  response  re¬ 
quired  by  paragraph  (b)  of  this  section.) 
Such  a  request  will  reasonably  identify 
the  record  within  the  system  of  records 
sought. 

(iii)  If  access  is  granted,  upon  request 
pay  any  fee  charged  in  accordance  with 
paragraph  (e)  (2)  (ii)  of  this  section  and 
provide  any  information  or  documenta¬ 
tion  sought  in  accordance  with  para¬ 
graph  (e)  (2)  of  this  section. 

(iv)  If  access  is  denied  in  whole  or  in 
part,  appeal  if  he  so  desires  to  the  Secre¬ 
tary  of  the  Army,  Attention:  Office  of 
the  General  Counsel.  Such  an  appeal 
will  be  addressed  to  the  appropriate  Ac¬ 
cess  and  Amendment  Refusal  Authority 
for  forwarding  to  the  General  Counsel. 

(2)  If  the  appeal  is  denied  in  whole  or 
in  part,  the  individual  may  seek  judicial 
review  of  the  denial  in  accordance  with 
section  3(g)  of  the  Privacy  Act. 

(e)  Processing  requests  for  access.  (1) 
The  official  who  receives  the  request 
specified  in  paragraph  (d)  (1)  (ii)  of  this 
section  will,  within  ten  working  days  of 
receipt,  acknowledge  such  receipt. 

(2)  With  respect  to  any  portion  of  the 
record  to  which  this  official  determines 
that  access  must  or  can  be  granted,  he 
will,  within  thirty  working  days  of  re¬ 
ceipt,  inform  the  individual : 

(1)  That  access  can  be  obtained  either 
by  mail  (through  copy  reproduction)  or 
in  person  (through  personal  inspection) , 
at  the  individual’s  option.  Personal  in¬ 
spection  will  normally  be  allowed  during 
duty  hours  at  a  location  reasonably  con¬ 
venient  to  the  requester; 

(ii)  Of  the  fees,  if  any,  that  are  to  be 
charged.  Only  the  cost  of  reproducing 
those  copies  desired  by  the  individual 
may  be  charged.  These  charges  will  be 
at  the  rate  specified  in  32  CFR  518.19, 
and  may  be  waived  as  provided  therein 
or  otherwise  within  the  discretion  of  the 
releasing  official. 


(iii)  If  th?  records  would  not  be  avail¬ 
able  to  any  member  of  the  public  under 
32  CFR  Part  518,  that  he  must  provide 
reasonable  verification  of  his  identity. 

(a)  When  access  is  requested  in  per¬ 
son,  verification  will  normally  be  limited 
to  information  or  documents  which  an 
individual  is  likely  to  have  readily  avail¬ 
able  e.g.,  driver’s  license,  employee  or 
military  identification  card.  Where  no 
suitable  documentation  can  be  provided, 
a  signed  statement  from  the  individual 
asserting  his  identity  and  indicating 
knowledge  of  the  penalty  for  obtaining 
or  requesting  records  under  false  pre¬ 
tenses  (a  fine  of  up  to  $5000)  will  suffice. 

(b)  When  access  is  requested  through 
the  mail,  verification  may  involve  pro¬ 
viding  certain  minimum  identifying  data, 
such  as  name  and  date  of  birth.  If  the 
sensitivity  of  the  information  contained 
in  the  requested  record  warrants,  a  signed 
and  notarized  statement  similar  to  that 
described  in  paragraph  (A)  may  be  re¬ 
quired. 

Note:  An  individual  cannot  be  denied  ac¬ 
cess  to  a  record  solely  because  he  refuses  to 
provide  his  social  security  number,  unless  the 
number  was  required  for  'access  by  statute  or 
regulation  adopted  prior  to  January  1,  1975. 
See  S  505.4(d). 

(iv)  That  the  individual  who  desires 
access  in  person  may  be  accompanied  by 
another  individual  of  his  own  choosing, 
if  he  so  desires.  The  appropriate  com¬ 
mander  may  require  the  individual  to 
furnish  a  written  statement  authorizing 
any  discussion  of  the  records  in  the  pres¬ 
ence  of  the  accompanying  person. 

(3)  Promptly  upon  receipt  of  any  fee, 
information,  and  documentation  re¬ 
quested  pursuant  to  paragraph  (e)  (2) 
of  this  section,  the  releasing  official  will 
grant  access  to  the  records  as  requested. 
Any  such  record  will  be  in  a  form  com¬ 
prehensible  to  the  individual. 

(4)  With  respect  to  any  portion  of  the 
record  to  which  the  official  indicated  in 
the  applicable  system  notice  determines, 
in  accordance  with  paragraph  (f )  of  this 
section,  that  access  must  be  denied,  he 
will  within  ten  working  days  of  receipt  of 
the  request: 

(i)  Forward  a  copy  of  the  request,  to¬ 
gether  with  a  copy  of  the  record  involved 
and  his  reason(s)  for  recommending  de¬ 
nial,  to  the  appropriate  Access  and 
Amendment  Refusal  Authority  (AARA) 
identified  in  §  505.1(g),  and 

(ii)  Notify  the  individual  of  this 
referral. 

(5)  With  respect  to  any  portion  of  the 
record  to  which  the  AARA  decides  to 
grant  access,  he  will  follow  the  proce¬ 
dures  specified  in  paragraph  (e)  (2)  and 

(3)  of  this  section.  With  respect  to  those 
portions  which  he  denies,  he  will,  within 
the  same  thirty  working  day  period : 

(i)  Inform  the  individual  in  writing 
of  his  reason (s)  for  doing  so.  This  will 
include  a  statement  of  the  exemptions 
relied  upon  under  the  Privacy  Act  and 
the  Freedom  of  Information  Act  and  the 
significant  and  legitimate  governmental 
purposes  served  by  non-disclosure  (see 
paragraph  (f)(2))  of  this  section; 

(ii)  Advise  the  individual  of  his  right 
to  appeal  through  the  AARA  to  the  Sec¬ 


retary  of  the  Army,  Attention:  Office  of 
the  General  Counsel;  and 

(iii)  Submit  copies  of  the  request  and 
his  denial  to  the  Office  of  the  General 
Counsel. 

(6)  An  AARA  who  receives  a  notice  of 
appeal  (paragraph  (d)  (1)  (iv)  of  this  sec¬ 
tion)  will  forward  it  to  the  General 
Counsel  within  five  working  days  of  re¬ 
ceipt.  This  referral  will  include  copies  of 
all  records  requested  by  the  individual, 
clearly  indicating  those  portions  to  which 
access  was  denied,  together  with  a  de¬ 
tailed  justification  for  the  denial. 

(7)  The  Office  of  the  General  Counsel, 
on  behalf  of  the  Secretary  of  the  Army 
and  within  twenty-five  working  days 
after  receipt  of  the  appeal  letter,  will 
decide  any  appeal  submitted  to  it. 

(f)  Denial  of  access.  (1)  Commanders 
and  custodians  possessing  records  are 
authorized  to  provide  access  to  records 
on  request  of  the  individual  concerned, 
unless  otherwise  limited  by  applicable 
regulation.  However,  only  the  appropri¬ 
ate  AARA  Identified  in  §  505.1(g)  is 
authorized  to  deny  access. 

(2)  Individuals  may  be  denied  access 
to  a  record  only  if  it  was  compiled  in  rea¬ 
sonable  anticipation  of  a  civil  action  or 
proceeding,  or  if  : 

(i)  It  has  been  properly  exempted 
from  the  disclosure  provisions  of  the 
Privacy  Act,  in  accordance  with  §  505.7; 
and 

(ii)  It  would  not  otherwise  be  required 
to  be  disclosed  under  the  Freedom  of  In¬ 
formation  Act  (32  CFR  Part  518) ;  and 

(iii)  There  exists  a  significant  and 
legitimate  governmental  purpose  for 
doing  so. 

(3)  An  individual  will  not  be  denied 
access  to  his  record  solely  because  it  is 
exempt  from  disclosure  under  32  CFR 
Part  518  or  because  its  physical  presence 
is  not  readily  available,  e.g.,  on  magnetic 
tape.  Access  will  not  be  conditioned  upon 
any  requirement  to  state  a  reason  or 
otherwise  justify  a  need  for  access. 

(4)  If  a  record  contains  both  releas¬ 
able  and  exempt  information,  the  releas¬ 
able  portions  will  be  segregated  and 
made  available.  For  example,  to  protect 
the  personal  privacy  of  other  persons 
who  may  be  identified  in  a  record,  an 
extract  or  copy  will  be  made,  deleting 
only  that  information  pertaining  to 
those  persons  which  would  be  denied  to 
the  requesting  individual  under  32  CFR 
Part  518. 

(5)  A  medical  record  will  be  disclosed 
to  the  individual  to  whom  it  pertains  un¬ 
less,  in  the  judgment  of  a  physician,  ac¬ 
cess  to  the  record  could  have  an  adverse 
effect  on  the  individual’s  physical  or 
mental  health.  When  it  has  been  deter¬ 
mined  that  the  disclosure  could  have 
such  an  effect,  the  information  may  be 
transmitted  to  a  physician  named  by  the 
requesting  individual,  who  will  be  in¬ 
formed  of  this  alternative.  Such  trans¬ 
mittals  are  not  considered  to  constitute  a 
denial  of  access. 

(6)  Requests  for  access  to  records 
which  are  considered  to  be  the  property 
of  another  agency  (within  the  meaning 
of  the  Privacy  Act)  or  office  within  the 
Department  of  Defense,  or  which  are  on 
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loan  to  the  using  office,  e.g.,  investiga¬ 
tive  records,  will  be  referred  to  the  ap¬ 
propriate  agency  or  office  in  accordance 
with  paragraph  (a)  (2)  and  (3)  of  this 
section.  Requests  for  all  other  records 
contained  in  a  system  of  records  must  be 
processed  in  accordance  with  this  rule 
and,  if  applicable,  in  coordination  with 
the  originating  organization. 

(g)  Requests  for  accounting  of  certain 
disclosures.  Any  individual  (or  his 
authorized  representative)  may  request 
the  accounting  of  disclosures  of  records 
pertaining  to  him  made  pursuant  to 
§  505.3,  (c) .  Such  requests  shall  be  ad¬ 
dressed  to  the  records  custodian,  and  will 
be  processed  in  accordance  with  para¬ 
graphs  (d)  to  (f)  of  this  section,  as  ap¬ 
plicable.  Requests  may  be  denied  only 
for  those  accountings  made  pursuant  to 
§  505.3  (b)  (7) ,  or  to  the  extent  the  sys¬ 
tem  within  which  the  record  is  contained 
has  been  exempted  from  this  provision  in 
accordance  with  §  505.7. 

(h)  Procedure  for  requesting  amend¬ 
ment  of  records.  Upon  request,  an  indi¬ 
vidual  (or  his  authorized  representative) 
will  have  any  record  pertaining  to  him 
amended  by  correction,  addition,  dele¬ 
tion  or  otherwise,  regardless  of  whether 
it  is  part  of  a  system  of  records,  if  such 
record  is  not  accurate,  relevant,  timely, 
or  complete. 

(1)  An  individual  desiring  amendment 
will: 

(i)  Submit  a  request  in  writing  to  the 
custodian  of  the  records;  however,  indi¬ 
viduals  who  make  oral  requests  for 
amendments  that  can  be  accepted  will 
not  be  requested  to  submit  the  request 
in  writing.  Such  requests  will  contain 
sufficient  information  to  permit  identi¬ 
fication  and  location  of  the  records,  a 
description  of  the  item  or  portion  for 
which  amendment  is  requested,  the  rea¬ 
son  (s)  why  amendment  is  being  re¬ 
quested  and,  if  appropriate,  documentary 
evidence  supporting  the  requested 
amendment.  The  burden  of  proof  is  on 
the  individual  to  demonstrate  the  pro¬ 
priety  of  amendment.  The  individual  will 
also  provide  verification  of  his  identity, 
as  described  in  paragraph  (e)  (2)  (iii)  of 
this  section,  to  ensure  that  he  is  seeking 
amendment  of  his  records  and  none 
other. 

(ii)  Provide  any  additional  informa¬ 
tion  which  may  be  required  pursuant  to 
paragraph  (i)  (1)  (ii) ,  (2),  or  (4). 

(iii)  If  amendment  is  refused  in  whole 
or  in  part,  appeal  if  he  so  desires  to  the 
Department  of  the  Army  Privacy  Review 
Board  (see  S  505.1(h)).  The  appeal  will 
be  addressed  to  the  appropriate  Access 
and  Amendment  Refusal  Authority  for 
forwarding  to  the  Board. ' 

(2)  If  the  appeal  is  denied  in  whole  or 
in  part,  the  individual  may : 

(i)  Submit,  if  he  so  desires,  to  the  cus¬ 
todian  of  the  record  a  concise  statement 
setting  forth  the  reasons  for  his  disagree¬ 
ment  with  the  refusal  of  the  Board  to 
amend.  See  paragraphs  (i)  (4)  and  (j)  of 
this  section. 

(ii)  Seek,  if  he  so  desires,  judicial  re¬ 
view  of  the  denial  in  accordance  with 
Section  3(g)  of  the  Privacy  Act 


(3)  Requests  for  amendment  in  ac¬ 
cordance  with  this  rule  may  be  sought 
only  where  the  record  is  alleged  to  be 
inaccurate,  irrelevant,  untimely,  o:  in¬ 
complete.  Also,  the  rule  does  not  permit 
the  alteration  of  evidence  presented  in 
the  course  of  judicial,  quasi-judicial,  or 
quasi-legislative  proceedings. 

(i)  Processing  of  requests  for  amend¬ 
ment  of  records. 

(1)  The  custodian  of  any  record  who 
Initially  receives  a  request  for  amend¬ 
ment  pursuant  to  paragraph  (h)(1)  (i) 
of  this  section  will: 

(1)  Within  ten  working  days  after  re¬ 
ceipt,  acknowledge  in  writing  such  re¬ 
ceipt.  The  acknowledgment  will  clearly 
identify  the  request  and  advise  the  indi¬ 
vidual  when,  he  may  expect  to  be  in¬ 
formed  of  action  taken  on  the  request.  If 
the  request  is  delivered  in  person,  a  writ¬ 
ten  acknowledgment  should  be  provided 
when  the  request  is  presented. 

(ii)  If  further  information  is  essential 
for  proper  processing  of  the  request,  con¬ 
tact  the  individual  immediately  and  ex¬ 
plain  the  necessity  of  such  Information. 
The  time  periods  specified  by  this  section 
will  be  deferred  pending  receipt  of  such 
information. 

(iii)  If  he  determines  that  amendment 
is  proper  because  the  record  is  inaccurate,, 
irrelevant,  untimely,  or  incomplete,  make” 
the  necessary  correction  and  so  advise 
the  individual  within  ?0  working  days 
after  receipt  of  the  request.  If  a  disclo¬ 
sure  accounting  has  been  made  (see 
S  505.3(c)),  he  will  advise  all  previous 
recipients  of  the  record  of  the  substance 
of  the  correction  and  that  they  should 
notify  those  to  whom  they  have  disclosed 
the  record  of  this  correction.  Amend¬ 
ments  of  records  will  be  physically  ac¬ 
complished,  as  circumstances  warrant, 
through  the  addition  of  supplementary 
information,  or  by  means  of  annotations, 
alteration,  obliteration,  deletion,  or  de- 
structure  of  the  record  or  a  portion  of  it. 
Files  maintenance  and  disposition  in¬ 
structions  in  the  340-series  of  Army  Reg¬ 
ulations  (AR)  do  not  apply  to  destruc¬ 
tion  of  records  accomplished  in  order  to 
amend  records  pursuant  to  this  rule. 

(iv)  If  he  believes  that  amendment  is 
not  proper,  because  the  system  contain¬ 
ing  the  record  has  been  exempted  pur¬ 
suant  to  section  505.7  or  otherwise,  within 
five  working  days  after  receipt  forward 
the  request,  along  with  the  records  in¬ 
volved  and  his  recommendation,  to  the 
appropriate  AARA  identified  in  section 
505.1,  paragraph  (f ) .  He  will  also  inform 
the  individual  of  this  referral  when  he 
acknowledges  receipt  pursuant  to  para¬ 
graph  (i)  (1)  (i)  of  this  section. 

(2)  If  an  AARA  properly  receives  a  re¬ 
quest  for  amendment  directly  from  an 
individual,  the  AARA  will  acknowledge 
the  request  within  10  working  days  as 
required  by  paragraph  (i)  (1)  (i)  of  this 
section. 

(3)  The  AARA  may  request  further  in¬ 
formation  pursuant  to  paragraph  (1)  (1) 
(ii)  of  this  section.  The  days  thus 
elapsing  will  not  count  as  part  of  the  30 
working  days.  If  he  determines  that 
amendment  is  proper,  even  if  the  system 


containing  the  record  is  exempt  from  the 
amendment  requirement  pursuant  to 
section  505.7,  he  will  take  or  cause  to  be 
taken  the  action  specified  in  paragraph 
(i)  (1)  (iii)  of  this  section,  within  thirty 
working  days  after  the  custodian’s  receipt 
of  the  request.  If  he  determines  that 
amendment  is  not  proper,  he  will  within 
this  same  period: 

(i)  Explain  to  the  individual  in  writ¬ 
ing  his  reason (s)  for  not  amending  the 
records: 

(ii)  Advise  the  individual  that  he  may 
request  further  review  by  the  DA  Privacy 
Review  Board  and  that  any  such  request 
should  be  addressed  to  the  AARA  for  for¬ 
warding  to  the  Board;  and  (iii)  Furnish 
copies  of  the  letters  of  request  and  denial 
to  the  Board  and  to  the  commander  pos¬ 
sessing  the  records. 

(4)  On  receipt  of  a  request  from  an  in¬ 
dividual  for  review  of  an  initial  refusal, 
the  AARA  will  assemble  the  case  and, 
within  five  working  days  after  receipt, 
forward  it  to  the  DA  Privacy  Review 
Board.  HQDA  (DAAG-AMR)  Washing¬ 
ton,  D.C.  20314  for  action.  The  assembled 
case  will  include  the  request  for  further 
review,  the  request  for  amendment,  the 
initial  refusal,  a  copy  of  the  record  in¬ 
volved,  and  records  or  coordination  ac¬ 
tions  that  substantiate  the  initial  ref  usal 
and  an  explanation  as  to  why  the  record 
was  not  amended. 

(5)  The  DA  Privacy  Review  Board,  on 
behalf  of  the  Secretary  of  the  Army,  will 
complete  action  on  any  request  for  fur¬ 
ther  review  submitted  to  it  within  thirty 
days  after  receipt  of  the  request  by  the 
AARA.  The  Board  may  seek  further  in¬ 
formation  from  the  individual  in  accord¬ 
ance  with  paragraph  (1)  (1)  (ii)  of  this 
section.  If  it  determines  that  amendment 
is  proper,  even  if  the  system  containing 
the  record  is  exempt  from  the  amend¬ 
ment  requirements  pursuant  to  §  505.7, 
the  Board  will  take  or  cause  to  be  taken 
the  action  specified  in  paragraph 
(i)  (1)  (iii)  of  this  section.  If  it  determines 
not  to  amend  the  records,  it  will  take  the 
action  specified  in  paragraph  (i)  (3)  (i) 
of  this  section  and  inform  the  individual 
in  writing: 

(i)  Of  his  right  to  file  with  the  cus¬ 
todian  of  the  record  a  concise  statement 
of  his  reasons  for  disagreeing  with  the 
decision  of  the  Board; 

(ii)  That  any  such  statement  will  be 
made  available  to  anyone  to  whom  the 
record  is  subsequently  disclosed,  together 
with  (if  the  Army  deems  it  appropriate) 
a  brief  statement  summarizing  its  rea¬ 
sons  for  refusing  to  amend  the  record; 

(iii)  That  prior  recipients  of  the  dis¬ 
puted  record  will  be  provided  a  copy  of 
any  statement  of  dispute  to  the  extent 
that  an  accounting  of  disclosures  was 
maintained  (see  8  505.3(c) ) ;  and 

(iv)  Of  his  right  to  seek  judicial  re¬ 
view  of  the  agency’s  refusal  to  amend  a 
record  provided  for  in  section  3(g)(1) 
(A)  of  the  Privacy  Act. 

(6)  The  Board  will  not  uphold  a  re¬ 
fusal  to  amend  a  record  as  requested 
unless  such  refusal  is  supported  by  the 
General  Counsel 
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(j)  Statement  of  disagreement.  (1) 
When  an  individual  files  a  statement 
disagreeing  with  the  Board’s  decision  not 
to  amend  a  record,  the  custodian  will 
clearly  annotate  the  record  so  that  the 
fact  that  the  record  is  disputed  is  ap¬ 
parent  to  anyone  who  may  subsequently 
access,  use,  or  disclose  it.  The  notation 
itself  should  be  integral  to  the  record  and 
specific  to  the  portion  in  dispute.  For 
automated  systems  of  records,  the  nota¬ 
tion  may  consist  of  a  special  indication 
on  the  entire  record  or  the  specific  part 
of  the  record  in  dispute. 

(2)  The  statements  of  dispute  need 
not  be  maintained  as  an  integral  part  of 
the  records  to  which  they  pertain.  They 
should,  however,  be  filed  in  such  a  man¬ 
ner  as  to  permit  them  to  be  retrieved 
readily  whenever  the  disputed  portion  of 
the  records  is  to  be  disclosed. 

(3)  If  there  is  any  question  as  to 
whether  the  dispute  pertains  to  informa¬ 
tion  being  disclosed,  the  statement  of 
dispute  should  be  included. 

(4)  When  information  which  is  the 
subject  of  a  statement  of  dispute  is  sub¬ 
sequently  disclosed,  the  disclosing  au¬ 
thority  must  note  that  the  information 
is  disputed  and  provide  a  copy  of  the  in¬ 
dividual’s  statement. 

(5)  The  disclosing  authority  may  in¬ 
clude  a  brief  summary  of  the  Board’s 
reasons  for  not  making  a  correction  when 
disclosing  disputed  information.  Sum¬ 
maries  will  be  limited  to  the  reasons 
stated  to  the  individual  by  the  Board. 
The  summary  will  be  treated  as  part  of 
the  individual’s  record  for  purposes  of 
granting  access  under  paragraphs  (c)  to 
(e)  of  this  section.  However,  it  will  not 
be  subject  to  the  amendment  procedures 
of  paragraphs  (h)  to  (i)  of  this  section. 

(k)  Privacy  case  files.  Privacy  case  files 
will  be  established  in  each  element  of  the 
Army  involved  in  processing  privacy  re¬ 
quests.  Such  case  files  will  include  re¬ 
quests  from  the  replies  to  individuals  on 
whether  a  system  contains  a  record  per¬ 
taining  to  them;  requests  for  access  and 
approvals,  initial  denials  and  final  review 
actions;  requests  for  amendment  and  ap¬ 
provals,  initial  refusals,  and  final  review 
action;  coordination  actions,  and  related 
papers.  Privacy  case  files  will  be  used 
solely  in  processing  the  requests,  and  as 
source  of  precedents  for  formulating 
policies  and  procedures  or  for  process¬ 
ing  other  similar  requests.  Under  no  cir¬ 
cumstances  will  privacy  case  files  be  dis¬ 
closed  for  use  in  making  any  other  deter¬ 
mination  about  an  individual.  Mainte¬ 
nance  and  disposition  of  privacy  case 
files  will  be  in  accordance  with  instruc¬ 
tions  contained  in  AR  340-18-2. 

§  505.3  Disclosure  of  personal  informa¬ 
tion  to  other  agencies  and  individ¬ 
uals. 

(a)  General.  (1)  Except  as  prescribed 
in  §  505.2,  this  rule  does  not  require  the 
disclosure  of  any  record  within  a  system 
of  records  to  any  agency  or  person.  This 
section  describes  those  limited  situations 
where  such  disclosures  may  be  made 
without  the  individual’s  consent,  and 
provides  for  the  maintenance  of  an  ac¬ 
counting  of  such  disclosures. 


(2)  Prior  to  disseminating  any  record 
about  an  individual  outside  the  Depart¬ 
ment  of  Defense,  unless  the  dissemina¬ 
tion  is  required  by  the  Freedom  of  Infor¬ 
mation  Act  (32  CFR  Part  518) — see 
paragraph  (b)  (2)  of  this  section — the 
disseminating  official  will  make  reason¬ 
able  efforts  to  assure  that  such  records 
are  as  accurate,  relevant,  timely  and 
complete  as  would  be  reasonably  neces¬ 
sary  to  assure  fairness  in  any  determina¬ 
tion  that  might  be  made  on  the  basis  of 
such  record.  Recipients  of  records  should 
be  advised  on  any  limitation  on  the  ac¬ 
curacy,  relevancy,  timeliness,  or  com¬ 
pleteness  of  the  information  disclosed, 
e.g.,  accurate  as  of  a  specific  date,  or  an 
unreliable  source. 

(3)  Nothing  in  this  chapter  shall  be 
considered  to  apply  to  the  transfer  of 
records  to — 

(i)  Any  Federal  records  center  for 
storage  where  the  records  remain  under 
the  control  of  the  Army  and  the  records 
center  personnel  act  on  behalf  of  the 
Army;  or 

(ii)  Another  civilian  personnel  office 
in  a  different  agency  as  a  result  of  a 
transfer  or  potential  transfer  of  a  civilian 
employee. 

(b)  Conditions  of  disclosures.  No  rec¬ 
ord  contained  in  a  system  of  records 
maintained  within  the  Department  of  the 
Army  will  be  disclosed  by  any  means  of 
communications  (e.g.,  oral,  written,  elec¬ 
tronic,  mechanical  transfers  between 
computer  or  personal  access)  to  any  per¬ 
son  or  to  any  agency,  except  pursuant  to 
a  written  request  by,  or  with  the  prior 
written  consent  of,  the  individual  to 
whom  the  record  pertains,  unless  dis¬ 
closure  of  the  record  will  be: 

(1)  To  those  officials  and  employees  of 
the  Department  of  Defense  who  have  a 
need  for  the  record  in  the  performance 
of  their  duties  and  their  use  is  compatible 
with  the  purpose  for  which  the  record  is 
maintained.  This  includes,  for  example, 
transfer  of — 

(1)  Information  between  the  Depart¬ 
ment  of  the  Army  and  other  components 
of  the  Department  of  Defense  when 
civilian  employees  or  military  personnel 
are  assigned  to  or  processed  by  another 
Department  of  Defense  component  or 
activity  thereof. 

(ii)  Records  required  by  The  Judge 
Advocate  General  for  use  in  litigation  in 
which  the  United  States  has  an  interest. 

(2)  Required  under  the  Freedom  of  In¬ 
formation  Act  (32  CFR  Part  518).  Some 
examples  of  personal  information  per¬ 
taining  to  military  personnel  which  nor¬ 
mally  is  released  without  an  unwarranted 
invasion  of  privacy  are:  name,  grade, 
date  of  birth,  date  of  rank,  salary,  present 
and  past  duty  assignments,  future  as¬ 
signments  which  have  been  approved, 
unit  or  office  address  and  telephone  num¬ 
ber,  source  of  commission,  military  and 
civilian  educational  level,  and  promotion 
sequence  number.  For  disclosure  of  per¬ 
sonal  information  pertaining  to  civilian 
employees,  see  section  7,  Chapter  294, 
Federal  Personnel  Manual.  See  also  para¬ 
graph  (f)  of  this  section. 

(3)  For  a  routine  use  as  defined  in 
§  505.1(e)  (6)  and  described  in  §  505.6(g) . 


(4)  To  the  Bureau  of  the  Census  for 
the  purpose  of  planning  or  carrying  out 
a  census,  survey,  or  related  activity  au¬ 
thorized  by  title  13  of  the  United  States 
Code. 

(5)  To  a  recipient  who  states  in  writing 
the  purpose  for  requesting  the  records 
and  assures  that  the  records  (such  writ¬ 
ten  statements  will  be  made  part  of  the 
accounting  of  disclosures  under  para¬ 
graph  (c)  of  this  section)  — 

(i)  Will  be  used  solely  as  a  statistical 
research  or  reporting  record  (see  §  505.1 
(e)(7)) ; 

(ii)  Is  to  be  transferred  in  a  form  that 
is  not  individually  identifiable  (i.e.,  the 
identity  of  the  individual  cannot  be  de¬ 
termined  by  combining  various  statis¬ 
tical  records) ;  and 

(iii)  Will  not  be  used  to  make  any 
decisions  concerning  the  rights,  benefits 
or  privileges  of  an  individual. 

(6)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has  suf¬ 
ficient  historical  or  other  value  to  war¬ 
rant  its  continued  preservation  by  the 
US  Government,  or  for  evaluation  by  the 
Administrator  of  General  Services  or  his 
designee  to  determine  whether  the 
record  has  such  value. 

(7)  To  another  agency  or  to  an  in¬ 
strumentality  of  any  governmental  juris¬ 
diction  within  or  under  the  control  of  the 
United  States  for  a  civil  or  criminal  law 
enforcement  activity  if  the  activity  is 
authorized  by  law,  and  if  the  head  of  the 
agency  or  instrumentality  has  made  a 
written  request  to  the  Department  of  the 
Army  specifying  the  particular  portion  of 
the  record  desired  and  the  law  enforce¬ 
ment  activity  for  which  the  record  is 
sought.  Blanket  requests  of  this  nature 
for  all  records  pertaining  to  an  individual 
will  not  be  accepted.  A  record  may  be 
disclosed  to  any  law  enforcement  agency 
when  illegal  activity  is  suspected,  if  such 
disclosure  has  been  established  in  ad¬ 
vance  as  a  “routine  use”  in  §  505.9. 

(8)  To  a  person  pursuant  to  a  showing 
of  compelling  circumstances  affecting  the 
health  or  safety  of  an  individual,  if  upon 
such  disclosure  notification  is  trans¬ 
mitted  to  the  last  known  address  of  the 
individual  to  whom  the  record  pertains. 

(9)  To  either  House  of  Congress  or,  to 
the  extent  of  matters  within  its  juris¬ 
diction,  any  committee  or  subcommittee 
thereof,  any  joint  committee  of  Congress 
or  any  subcommittee  of  such  a  joint  com¬ 
mittee.  This  does  not  authorize  the  dis¬ 
closure  of  any  record  within  a  system  of 
records  to  members  of  Congress  acting 
in  their  individual  or  private  capacities 
or  on  behalf  of  their  constituents. 

(10)  To  the  Comptroller  General,  or 
to  any  of  his  authorized  representatives, 
in  the  course  of  the  performance  of  the 
duties  of  the  General  Accounting  Office. 

(11)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction: 

(i)  When  a  record  is  disclosed  under 
compulsory  legal  process  and  when  the 
issuance  of  that  order  or  subpoena  is 
made  public  by  the  court  which  issued  it, 
reasonable  efforts  must  be  made  to  notify 
the  individual  to  whom  the  record  per¬ 
tains.  This  may  be  accomplished  by 
notifying  the  individual  by  mail  at  his 
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most  recent  address  as  contained  in  De¬ 
partment  of  the  Army  records. 

(ii)  Upon  being  served  with  an  order 
to  disclose  a  record,  the  Army  Staff 
agency  head  or  commander  concerned 
will  determine  whether  the  Issuance  of 
the  order  is  a  matter  of  public  record 
and,  if  it  is  not,  seek  to  be  advised  when 
it  becomes  public.  An  accounting  of  the 
disclosure  will  be  made  at  the  time  the 
Army  Staff  agency  head  or  commander 
complies  with  the  order  or  subpoena. 

(iii)  The  notification  requirement  im¬ 
posed  by  this  subparagraph  may  be 
waived  only  if  the  system  of  records  has 
been  exempted  from  such  requirement 
in  accordance  with  §  505.7. 

(c)  Disclosure  accounting.  Each  rec¬ 
ords  custodian,  with  respect  to  each  sys¬ 
tem  of  records  under  his  control  will — 

(1)  Except  for  disclosure  made  under 
paragraph  (b)  (1)  or  (2)  of  this  section, 
keep  an  accurate  accounting  of  the  date, 
nature,  and  purpose  of  each  disclosure 
of  a  record,  the  name  and  address  of  the 
agency  or  person  to  whom  such  a  dis¬ 
closure  was  made,  and  a  cross  reference 
to  the  basis  or  justification  upon  which 
the  disclosure  was  made,  including  any 
written  documentation  required  for  re¬ 
lease  of  a  record  for  statistical  or  law 
enforcement  purposes.  See  paragraph 
(b)  (7)  and  (11)  of  this  section.  This 
provision  also  applies  to  disclosures  made 
at  the  request  of  or  with  the  consent  of 
the  individual,  as  provided  in  paragraph 
(b)  of  this  section. 

(2)  In  some  instances,  as  in  the  case 
of  records  in  file  folders,  the  disclosure 
accounting  record  may  be  included  in 
the  folder  for  each  individual.  However, 
a  records  custodian  need  not  make  a 
notation  on  a  single  document  of  every 
disclosure  of  a  particular  record,  pro¬ 
vided  he  can  reconstruct  the  required 
information  from  his  accounting  system 
whenever: 

(i)  Requested  by  the  individual  pur¬ 
suant  to  §  505.2(g). 

(ii)  Necessary  to  inform  previous  re¬ 
cipients  of  amendments  or  disputes  made 
in  accordance  with  §  505.2. 

(iii)  Necessary  to  provide  an  audit 
trail  for  subsequent  review  of  Army  com¬ 
pliance  with  paragraph  (b)  of  this 
section. 

(3)  Retain  the  disclosure  accounting 
record  made  under  paragraph  (c)  (1)  of 
this  section  for  at  least  five  years  after 
the  last  disclosure,  or  for  the  life  of  the 
record,  whichever  is  longer.  No  record  of 
disclosure  of  the  contents  of  this  form 
need  be  maintained. 

(e)  Disclosure  accounting  form.  DA 
Form  4410-R,  Disclosure  Accounting 
Record,  is  authorized  and  encouraged  for 
use  in  recording  required  disclosure  ac¬ 
counting  information;  its  use  is  optional. 
The  development  and  use  of  local  forms 
to  record  disclosures  from  automated 
data  processing  (ADP)  or  other  special¬ 
ized  systems  of  records  is  authorized. 
Separate  forms  might  be  maintained  in¬ 
dicating  those  disclosures  made  pursuant 
to  paragraph  (b)  (7)  of  this  section  in 
order  to  facilitate  release  pursuant  to 
§  505.2(g).  DA  Form  4410-R  will  be  re¬ 
produced  locally  on  8”xl0V2 "  paper. 


(f)  Names  and  addresses.  (1)  Indi¬ 
vidual  home  addresses,  lists  or  compila¬ 
tions  of  names  and  home  addresses,  win 
not  be  disclosed  without  the  consent  of 
the  individual(s)  involved.  This  applies, 
but  is  not  limited,  to  requests  made  by 
members  of  Congress  acting  in  their  in¬ 
dividual  capacities  or  on  behalf  of  con¬ 
stituents;  creditors;  and  commercial  and 
financial  institutions.  Unless  doing  so 
would  significantly  interfere  with  Army 
operations,  e.g.,  where  a  multitude  of  ad¬ 
dresses  of  individuals  not  specifically 
identified  are  requested,  requests  for 
home  addresses  of  active  military  per¬ 
sonnel  and  civilian  employees  currently 
employed  by  the  Army  will  be  forwarded 
to  such  individuals  at  their  duty  or  office 
address;  the  duty  or  office  address  only 
will  be  furnished  in  response.  All  other 
requests  for  home  addresses  will  be  for¬ 
warded  to  the  last  known  home  address 
of  the  individual  for  reply  at  his  dis¬ 
cretion.  In  both  instances,  the  requester 
will  be  informed  of  the  referral  promptly. 

(2)  The  prohibition  against  release  of 
home  addresses  or  lists  thereof  may  be 
waived  when  circumstances  of  the  case 
indicate  compelling  and  overriding  inter¬ 
ests  deemed  sufficient  to  outweigh  pri¬ 
vacy  protection  considerations.  Gener¬ 
ally,  commercial  solicitation  does  not 
constitute  such  an  interest.  Cases  which 
cannot  be  resolved  on  this  basis  should 
be  forwarded  expeditiously  to  HQDA 
(DAJA-AL),  Washington,  D.C.  20310  for 
decision. 

(3)  An  individual’s  name  and  address 
or  listings  thereof  will  not  be  sold  or 
rented  by  any  element  of  the  Army  un¬ 
less  such  action  is  specifically  authorized 
by  law.  This  provision  will  not  be  con¬ 
strued  to  require  the  withholding  of 
names  and  addresses  otherwise  per¬ 
mitted  to  be  made  public.  It  will  not  be 
construed  to  prohibit  the  charging  of 
search  and  reproduction  fees  in  accord¬ 
ance  with  32  CFR  518.19,  for  those  rec¬ 
ords  released  in  accordance  with  the 
Freedom  of  Information  Act. 

(4)  Commanders  maintaining  home 
addresses  locator  services  will  obtain  the 
Individual’s  continuing  consent  or  re¬ 
fusal  for  release  of  his  home  address  in 
response  to  oral  or  telephonic  requests 
from  third  parties.  Such  consent  or  re¬ 
fusal  should  be  obtained  from  the  indi¬ 
vidual  at  the  time  information  on  him 
is  initially  entered  into  the  locator  sys¬ 
tem.  Disclosures  under  this  subpara¬ 
graph  are  considered  to  be  made  in  ac¬ 
cordance  with  the  Freedom  of  Informa¬ 
tion  Act;  therefore,  no  disclosure  ac¬ 
counting  is  required. 

§  505.4  Collection  of  personal  informa¬ 
tion  from  individuals. 

(a)  General.  This  chapter  prescribes 
certain  restrictions  on  and  procedures 
for  the  collection  of  information  pertain¬ 
ing  to  individuals,  including  social  secu¬ 
rity  numbers.  It  also  sets  forth  the  re¬ 
sponsibilities  of  Army  officials  in  connec¬ 
tion  with  these  forms.  Certain  systems  of 
records  may  be  exempted  from  the  re¬ 
quirements  of  paragraphs  (b)  and  (c) 
in  accordance  with  §  505.7. 


(b)  Collection  directly  from  individual. 
Personal  information  to  be  contained  in 
any  system  of  records,  except  statistical 
records,  will  be  collected  directly  from 
the  individual  to  the  greatest  extent 
practicable.  The  collection  of  informa¬ 
tion  from  third  parties  will  be  minimized 
so  as  to  minimize  the  possibility  of  ob¬ 
taining  erroneous,  outdated,  irrelevant, 
or  biased  information.  Exceptions  to  this 
policy  are  permitted  under  circum¬ 
stances  such  as  the  following: 

(1)  When  there  is  a  need  to  insure  ac¬ 
curacy  of  information  supplied  by  an  in¬ 
dividual  through  verification  with  a 
third  party,  such  as  verifying  informa¬ 
tion  for  a  security  clearance. 

(2)  When  the  information  can  only 
be  obtained  from  a  third  party,  e.g.,  an 
employee’s  performance  in  a  previous 
job  or  assignment;  a  criminal  investiga¬ 
tion. 

(3)  When  obtaining  the  information 
from  the  individual  would  present  excep¬ 
tional  practical  difficulties  or  would  re¬ 
sult  in  unreasonable  cost. 

(c)  Informing  individuals  from  whom 
Information  is  requested. 

(1)  Each  individual  who  is  asked  to 
furnish  personal  information,  whether 
or  not  it  is  to  become  part  of  a  system 
of  records,  must  be  informed  of  the  fol¬ 
lowing. 

(1)  The  authority  for  requesting  dis¬ 
closure.  See  §  505.6  (p) .  The  only  author¬ 
ity  which  may  be  cited  is : 

(a)  The  statute  or  executive  order 
which  specifically  authorizes  collection 
of  the  particular  personal  information 
requested;  or 

( b )  The  statute  or  executive  order 
which  authorizes  the  Army  to  perform 
a  function,  the  discharging  of  which 
requires  that  this  information  be  col¬ 
lected. 

(ii)  The  principal  purpose  or  purposes 
for  which  the  information  is  to  used,  e.g., 
to  evaluate  suitability  or  to  issue  benefit 
payments.  Generally,  the  purposes  will  be 
directly  related  to,  and  necessary  for,  the 
purpose  authorized  by  the  statute  or  ex¬ 
ecutive  order. 

(iii)  The  routine  uses  to  be  made  of 
the  information.  See  §  505.1(e)  (6). 

(iv)  Whether  furnishing  the  informa¬ 
tion  is  mandatory  or  voluntary,  i.e., 
whether  the  Army  is  required  or  author¬ 
ized  to  Impose  any  penalties  for  failing 
to  respond. 

(v)  The  effects  on  the  individual,  if 
any,  of  not  providing  all  or  any  part  of 
the  Information,  e.g.,  that  all  information 
requested  is  necessary  to  identify  prop¬ 
erly  an  Individual  and  evaluate  his 
claim  for  benefits  and,  without  such  in¬ 
formation,  no  benefits  can  be  awarded. 
There  should  be  no  adverse  effect  on  an 
individual  for  failing  to  provide  informa¬ 
tion  which  is  not  in  fact  relevant  and 
necessary.  See  §  505.5(b). 

(2)  In  those  cases  where  the  individ¬ 
ual  is  asked  to  supply  no  more  than  the 
information  specified  In  §  505.3(b)  (2) , 
and  such  information  is  currently  and 
property  maintained  in  a  system  of 
records,  the  requirements  of  this  para¬ 
graph  will  not  apply.  Also,  the  notifica¬ 
tion  requirement  applies  only  when  in- 
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formation  is  collected  directly  from  the 
individual,  e.g.,  when  the  individual  per¬ 
sonally  completes  a  form  or  when  he  dis¬ 
closes  information  to  an  official  during 
an  interview.  A  notification  statement  is 
not  required  for  forms,  reports  or  for¬ 
mats  which  are  completed  from  informa¬ 
tion  previously  compiled  on  the  in¬ 
dividual. 

(3)  The  notice  to  the  individual  will 
be  made  on  the  form  used  to  collect  the 
information  or  on  a  separate  form.  In 
either  case,  the  statement  will  be  fur¬ 
nished  to  the  individual  for  his  retention 
if  he  requests  it.  This  notification  must 
be  given  regardless  of  the  media  used  in 
requesting  information,  whether  it  is  a 
“form”  in  the  usual  sense,  i.e.,  a  pre¬ 
printed  document  with  a  control  number 
and  an  edition  date,  or  a  format,  ques¬ 
tionnaire,  survey  sheet,  magazine  re¬ 
sponse  card,  or  report  rendered  on  a 
blank  sheet  or  card,  etc.  When  informa¬ 
tion  is  being  collected  in  an  interview, 
the  interviewer  must  provide  the  indi¬ 
vidual  interviewed  with  the  notice.  Upon 
request,  this  notice  must  be  provided  in 
a  form  suitable  for  his  retention. 

(4)  In  those  cases  where  the  individ¬ 
ual’s  social  security  number  (SSN)  is  also 
requested,  the  individual  shall  be  pro¬ 
vided  the  information  specified  in  para¬ 
graph  (d)  of  this  section.  In  instances 
when  the  SSN  is  the  only  item  of  per¬ 
sonal  information  requested  from  the 
individual,  the  procedures  in  paragraph 

(d)  of  this  section  will  be  observed. 

(d)  Disclosure  of  social  security  num¬ 
ber.  (1)  Any  Army  official  who  requests 
an  individual  to  disclose  his  SSN  will  in¬ 
form  that  individual  whether  disclosure 
is  mandatory  or  voluntary,  of  the  statu¬ 
tory  or  other  authority  (including  regula¬ 
tions)  which  specifically  allows  or  re¬ 
quires  that  the  number  be  solicited,  and 
what  uses  will  be  made  of  it.  When  the 
SSN  is  the  only  item  of  personal  infor¬ 
mation  requested  from  an  individual, 
Executive  Order  9397,  and  the  applicable 
statute  or  Army  Regulation  or  other 
command  or  agency  directive,  will  be 
cited  as  authority  for  collecting  the  SSN. 
Where  appropriate,  notification  to  the 
individual  for  disclosure  only  of  the  SSN 
may  be  accomplished  by  a  sign  or  poster 
which  bears  the  required  information, 
placed  conspicuously  in  the  area.  If  such 
a  sign  is  used.  Army  elements  neverthe¬ 
less  should  be  prepared  to  furnish  a  copy 
of  the  statement  to  the  individual  on  his 
request.. 

(2)  When  disclosure  of  any  personal 
information  in  addition  to  the  SSN  is 
requested,  the  procedures  in  paragraph 

(e)  of  this  section  will  be  observed. 

(3)  An  individual  may  not  be  denied 
any  right,  benefit,  or  privilege  provided 
by  law  for  refusing  to  disclose  his  SSN 
unless  disclosure  is  required  by  Federal 
statute,  or  unless  disclosure  is  to  an  Army 
element  maintaining  a  system  of  records 
in  existence  and  operating  before  Janu¬ 
ary  1,  1975  and  disclosure  was  required 
under  statute.  Army  Regulation,  or  other 
directive  adopted  prior  to  January  1, 
1975. 

(4)  The  Department  of  the  Army  is 
not  precluded  from  requesting  disclosure 


of  the  SSN  under  circumstances  other 
than  described  in  paragraph  (d)  (3)  of 
this  section.  However,  the  individual 
must  be  notified  that  disclosure  of  the 
SSN  is  voluntary.  If  the  individual  re¬ 
fuses  to  disclose  his  SSN,  Army  elements 
must  be  prepared  to  identify  him  by  al¬ 
ternate  means. 

(5)  Upon  entrance  into  military  serv¬ 
ice  or  civilian  employment  with  the  De¬ 
partment  of  Defense,  the  individual  will 
disclose  his  SSN.  The  SSN  is  the  individ¬ 
ual’s  service  or  employment  identifica¬ 
tion  number  and  is  thus  needed  for 
purposes  of  establishing  his  personnel, 
financial,  medical,  and  other  official  rec¬ 
ords.  The  notice  described  in  paragraph 
(d)(1)  of  this  section,  will  be  provided 
the  individual  upon  entrance.  It  will  not 
not  be  required  whenever  the  individual 
is  subsequently  requested  to  give  or 
verify  his  SSN,  provided: 

(1)  The  SSN  is  requested  solely  for 
identification  purposes  in  connection 
with  official  Department  of  Defense  or 
Civil  Service  Commission  records. 

(ii)  No  use  will  be  made  of  this  num¬ 
ber  outside  of  the  Department  of  Defense 
or  Civil  Service  Commission,  except  as 
provided  by  the  Privacy  Act  (see  §  505.3 
(b)). 

(e)  Forms  in  use  prior  to  September 
27.  1975.  (1)  Forms  in  use  prior  to  Sep¬ 
tember  27,  1975  and  which  are  to  be 
used  after  that  date  must  meet  the  no¬ 
tice  requirements  by  use  of  a  separate 
statement  to  accompany  each  form  sub¬ 
ject  to  the  provisions  of  the  Privacy  Act 
of  1974.  This  statement  will  be  prepared 
on  DA  Form  4368-R  (Data  Required  by 
the  Privacy  Act  of  1974).  DA  Form  4368- 
R  will  be  reproduced  locally  on  8"  x 
10  V2”  paper. 

(2)  For  forms  in  regularly-issued, 
numbered  series,  the  DA  Form  4368-R 
identification  will  be  deleted  and  the 
Privacy  Act  Statement  will  be  assigned 
the  same  number  as  the  form  to  which 
it  pertains.  For  example,  in  the  case  of 
DD  Form  398  (Statement  of  Personal 
History),  the  applicable  notice  will  be 
designated  “DD  Form  398 — Privacy  Act 
Statement.” 

(3)  For  unnumbered  formats,  ques¬ 
tionnaires,  survey  sheets,  and  reports 
which  collect  personal  information  and 
identify  the  individual,  the  DA  Form 
4368-R  identification  will  be  deleted  and 
the  Privacy  Act  Statement  will  be  as¬ 
signed  the  reports  control  symbol  or  Of¬ 
fice  of  Management  and  Budget  (OMB) 
Approval  Number  that  authorizes  collec¬ 
tion  of  the  information. 

(4)  All  Privacy  Act  Statements  will 
be  submitted  with  DA  Form  1167  (Re¬ 
quest  for  Approval  of  Form)  and  a  pre¬ 
scribing  directive  to  the  head  of  the 
agency  or  the  commander,  ATTN :  Forms 
Management  Officer.  The  Forms  Man¬ 
agement  Officer  will  review  statements 
for  compliance  with  forms  design  prin¬ 
ciples.  A  forms  control  number  will  be 
assigned  to  each  Privacy  Act  Statement. 
Statements  that  accompany  forms  in 
regularly-issued,  numbered  series  will  be 
assigned  a  control  number  in  accordance 
with  instructions  in  paragraph  (e)(2)  of 
this  section.  Statements  that  accompany 


unnumbered  formats,  questionnaires, 
survey  sheets,  and  reports  will  be  as¬ 
signed  a  separate  forms  control  number 
in  addition  to  the  reports  control  symbol 
or  OMB  Approval  Number  authorizing 
collection  of  the  information  (paragraph 
(e)  (3)  of  this  section) . 

(f)  Forms  initiated  or  revised  after 
September  27.  1975.  As  forms  are  revised 
or  new  forms  are  issued,  the  Privacy  Act 
Statement  will  be  incorporated,  if  prac¬ 
ticable,  in  the  body  of  each  form,  format, 
questionnaire,  survey  sheet,  or  report. 
Where  feasible,  the  Privacy  Act  State¬ 
ment  will  be  positioned  before  the  infor¬ 
mation  requested  from  the  individual, 
when  incorporated  on  a  form,  format, 
etc.  When  it  is  impractical  to  contain 
the  statement  on  the  basic  form,  it  may 
be  printed  on  the  reverse  of  the  form,  or 
a  separate  statement  will  be  prepared. 
All  statements  will  be  reviewed  and  ap¬ 
proved  by  the  appropriate  privacy  and 
forms  management  officials. 

(g)  Other  agency  forms.  Forms  orig¬ 
inated  by  other  agencies  and  used  by  the 
Army  to  collect  personal  information 
from  individuals  to  be  contained  in  a 
system  of  records  must  contain  a  Privacy 
Act  Statement.  Use  of  other  agency  forms 
subject  to  the  Privacy  Act  without  a  no¬ 
tification  statement  will  be  immediately 
suspended  and  the  matter  referred  to 
the  appropriate  Army  forms  manage¬ 
ment  official.  The  forms  management 
official,  through  technical  channels,  will 
determine  whether  use  of  the  form  is 
local,  command-wide,  or  Army-wide. 
Based  on  the  outcome  of  this  determina¬ 
tion,  the  forms  management  official  will 
either  refer  the  problem  to  a  higher 
echelon  for  solution,  or,  through  tech¬ 
nical  channels,  contact  the  agency  orig¬ 
inating  the  form  to  determine  if  a  pri¬ 
vacy  statement  has  been  or  will  be  pre¬ 
pared.  When  the  other  agency  declines 
to  prepare  the  statement  or  undue  de¬ 
lay  is  encountered,  the  forms  manage¬ 
ment  official  will  refer  the  matter  to  the 
appropriate  privacy  official.  The  privacy 
official,  in  coordination  with  the  princi¬ 
pal  Army  user,  will  ensure  preparation 
of  a  privacy  statement  for  the  form  or 
take  action  to  discontinue  its  use. 

(h)  Responsibilities.  (1)  The  propo¬ 
nent  is  responsible  for  determining 
whether  a  form,  format,  questionnaire, 
survey  sheet,  or  report  requires  a  Pri¬ 
vacy  Act  Statement.  The  proponent  will 
prepare  Privacy  Act  Statements  when 
required  by  this  rule. 

(2)  Forms  management,  reports  con¬ 
trol  or  similar  management  officials  will 
ensure  that  all  forms,  formats,  question¬ 
naires,  survey  sheets,  or  reports  origi¬ 
nated  by  their  agency  or  command  and 
subject  to  this  regulation  contain  a  Pri¬ 
vacy  Act  Statement;  that  statements 
have  been  reviewed  and  approved  by  the 
privacy  official;  that  all  statements  meet 
the  criteria  for  approval  as  agency  or 
command  forms;  and  that  a  current  list¬ 
ing  is  maintained  of  all  forms  requiring 
a  Privacy  Act  Statement  (paragraph  (i) 
of  this  section) .  Forms  management,  re¬ 
ports  control  or  similar  management 
officials  will  coordinate  as  required  with 
other  agencies  to  ensure  the  availability 
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of  Privacy  Act  Statements  on  forms,  for¬ 
mats,  etc.,  originated  by  other  agencies 
and  used  by  the  Army  to  collect  personal 
data  from  individuals. 

( 3 )  Privacy  officials  are  responsible  for 
reviewing  the  content  of  Privacy  Act 
Statements  for  compliance  with  this  reg¬ 
ulation  and  for  assuring  that  statements 
are  issued  with  all  forms,  formats,  ques¬ 
tionnaires,  survey  sheets,  and  reports 
subject  to  this  regulation  which  are  used 
by  their  agency  or  command.  Privacy 
officials  will  coordinate  with  principal 
Army  users  of  forms  originated  by  other 
agencies  to  ensure  preparation  of  state¬ 
ments  when  the  forms  concerned  request 
personal  data  from  individuals  and  when 
the  originating  agencies  decline  to  pre¬ 
pare  statements.  In  the  absence  of  Pri¬ 
vacy  Act  Statements,  privacy  officials  will 
take  action  to  discontinue  use  of  these 
forms. 

(1)  Consolidated  forms  listing.  A  list¬ 

ing  of  those  command,  agency,  and  local 
forms  requiring  a  Privacy  Act  Statement 
will  be  compiled  and  maintained  in  a 
current  status.  As  a  minimum,  the  form 
number,  edition  date,  and  title  will  be  in¬ 
cluded.  DA  Form  4369-R  (Report  of 
Forms  Falling  Within  the  Provisions  of 
the  Privacy  Act  of  1974)  may  be  used 
for  this  purpose.  DA  Form  4369-R  will 
be  reproduced  locally  on  8"  x  IOV2” 
paper,  ' 

§  505.5  Systems  of  records. 

(a)  General.  (1)  This  chapter  pre¬ 
scribes  general  standards  for,  and  restric¬ 
tions  in,  the  maintenance  of  systems  of 
records.  It  also  requires  the  publication 
of  notices  in  the  Federal  Register  for 
these  systems  and  of  advance  notices  for 
some  of  these  systems. 

(2)  Certain  systems  of  records  may  be 
exempted  from  the  requirements  of  para¬ 
graphs  (b)  and  (c)  of  this  section  only, 
in  accordance  with  §  505.7.  Although  all 
systems  must  have  notices,  paragraph 
(e) ,  some  portions  of  these  notices  may 
not  have  to  be  published,  as  indicated  in 
section  505.7. 

(b)  Necessity  and  relevance  of  per¬ 
sonal  information.  (1)  Statutory  or  regu¬ 
latory  authority  performance  of  a  mis¬ 
sion  does  not  convey  unlimited  authority 
to  collect  and  maintain  in  a  system  of 
records  all  personal  Information  which 
may  be  useful  or  convenient.  Only  per¬ 
sonal  information  that  is  both  relevant 
and  necessary  to  accomplish  a  purpose 
required  by  Federal  statute  or  Executive 
Order  of  the  President  is  authorized  to  be 
maintained.  System  managers  will  evalu¬ 
ate  each  category  of  information  included 
in  their  system  for  necessity  and  rele¬ 
vance.  This  evaluation  will  consider  the: 

(i)  Relationship  of  each  item  of  infor¬ 
mation  to  the  statutory  or  regulatory 
purpose  for  which  the  system  is  main¬ 
tained. 

(ii)  Specific  adverse  consequences  of 
not  collecting  each  category  of  informa¬ 
tion. 

(iii)  Possibility  of  meeting  the  infor¬ 
mation  requirement  through  use  of  in¬ 
formation  not  individually  identifiable 
or  through  sampling  techniques. 


(iv)  Length  of  time  that  the  informa¬ 
tion  is  needed  and,  where  appropriate, 
techniques  for  purging  parts  of  the  rec¬ 
ord. 

(v)  Financial  cost  of  information 
maintenance,  compared  to  risk  or  adverse 
consequence  of  not  maintaining  it. 

(vi)  Necessity  and  relevance  of  this 
information  to  all  individuals  included  in 
the  system. 

(2)  Collection  will  be  discontinued 
for  each  category  or  item  of  information 
v^hich,  as  a  result  of  the  above  evalua¬ 
tion,  does  not  appear  to  be  reasonably 
justifiable.  Moreover,  such  information 
will  be  deleted  or  otherwise  withdrawn 
and  destroyed,  provided  it  can  be  eco¬ 
nomically  segregated  from  necessary  and 
relevant  information. 

(3)  The  evaluation  for  necessity  and 
relevance  will  be  accomplished  by  each 
manager  of  a  system  of  records : 

(i)  During  the  design  phase  of  a  new 
system  of  records  or  a  change  in  the 
existing  system-of  records. 

(ii)  Annually,  prior  to  publication  of 
the  compilation  of  system  notices  in  the 
Federal  Register  (paragraph  (e)  of  this 
section) . 

(4)  Nothing  in  this  paragraph  author¬ 
izes  the  destruction  of  records  which 
must  be  retained  under  the  Federal  Rec¬ 
ords  Act. 

(c)  Standards  for  records  maintained. 
Records  used  in  making  determinations 
about  an  individual  will  be  maintained 
with  such  accuracy,  relevance,  timeliness 
and  completeness  as  is  reasonably  neces¬ 
sary  to  ensure  fairness  to  the  individual 
in  the  determination. 

(d)  Restriction  on  maintenance  of 
certain  records.  No  system  of  records 
may  contain  any  information  describing 
how  individuals  exercise  rights  guaran¬ 
teed  by  the  First  Amendment,  includ¬ 
ing  religious  and  political  beliefs,  free¬ 
dom  of  speech  and  the  press,  and  the 
rights  of  assembly  and  to  petition,  unless: 

(1)  A  federal  statute  explicitly  pro¬ 
vides  that  the  Department  of  Defense 
or  Army  may  maintain  records  on  activi¬ 
ties  whose  exercise  is  covered  by  the 
First  Amendment  or  specifies  that  such 
activities  are  relevant  to  a  determination 
about  the  individual,  e.g.,  the  disclosure 
of  denominational  affiliation  by  members 
of  the  Chaplains  Branch  in  compliance 
with  10  USC  3065  and  3073. 

(2)  The  individual  expressly  author¬ 
izes  maintenance,  e.g.,  where  he  volun¬ 
tarily  indicates  a  religious  preference  so 
that  the  proper  clergyman  may  be  called 
in  the  event  of  an  emergency  or  associa¬ 
tion  memberships  in  order  to  enhance 
selection  for  a  particular  position.  Noth¬ 
ing  in  this  subparagraph  shall  be  con¬ 
strued  to  require  the  individual,  directly 
or  indirectly,  to  provide  any  information 
concerning  his  religious  or  political  affil¬ 
iations,  etc. 

(3)  The  record  is  required  for  an 
authorized  law  enforcement  function, 
e.g.,  to  ensure  that  political  or  religious 
activities  are  not  used  as  a  cover  for 
illegal  or  subversive  activities. 

(e)  Record  system  notices.  (1)  The 
Privacy  Act  of  1974  requires  that  an 


annual  notice  of  the  existence  of  each 
system  of  records,  as  defined  in  §  505.1 
(e),  be  published  in  the  Federal  Regis¬ 
ter  in  accordance  with  S  505.6.  The  no¬ 
tice  provision  of  the  Act  is  based  on  the 
premise  that  there  should  be  no  system 
of  records  whose  very  existence  is  never 
disclosed. 

(2)  Notices  for  existing  Army  systems 
of  records  are  published  in  the  Federal 
Register.  DAAG(AMR)  will  ensure  that 
such  notices,  together  with  any  changes, 
and  any  new  notices  are  forwarded  to 
the  Office  of  the  Assistant  Secretary  of 
Defense  (Comptroller)  (OASD(C))  for 
annual  republication  in  the  Federal 
Register. 

(f)  System  notices  for  new  systems  of 
records.  System  managers  proposing  new 
systems  of  records  will  prepare  system 
notices  in  accordance  with  §  505.6  and 
submit  them  to  HQDA  (DAAG-AMR), 
Washington,  D.C.  20314,  90  days  before 
the  systems  are  implemented.  DAAG- 
AMR  will  forward  this  material  to  the 
OASD(C)  for  publication  in  the  Federal 
Register  and  submission  to  the  Office  of 
Management  and  Budget  (OMB)  and 
the  Privacy  Protection  Study  Commis¬ 
sion  (Commission) . 

(g)  Changes  to  existing  systems  re¬ 
quiring  advanced  public  notice.  (1) 
Changes  in  existing  systems  require  cor¬ 
responding  changes  in  published  system 
notices.  The  following  types  of  changes 
to  existing  systems  must  be  published 
in  the  Federal  Register  for  public  com¬ 
ment  at  least  30  days  before  the  changes 
are  implemented: 

(1)  Those  which  expand  the  categories 
of  individuals  on  whom  records  are 
maintained. 

(ii)  Those  which  add  new  categories 
of  records  to  the  system. 

(iii)  Those  which  add  new  categories 
of  sources. 

(iv)  New  or  changed  routine  uses 
which  involve  disclosure  to  a  new  cate¬ 
gory  or  recipient. 

(v)  Changes  in  procedures  governing 
access. 

(2)  Revised  system  notices  incorpo¬ 
rating  the  proposed  changes,  prepared 
in  accordance  with  §  505.6,  will  be  sub¬ 
mitted  to  HQDA  (DAAG-AMR) ,  Wash¬ 
ington,  DC.  20314  at  least  90  days  before 
the  changes  are  implemented.  DAAG- 
AMR  will  forward  this  material  to  the 
OASD(C)  for  publication  and  submis¬ 
sion  to  OMB  and  the  Commission. 

(h)  Narrative  statement  for  new  or 
changed  system  notices.  Each  system 
notice  prepared  in  accordance  with  para¬ 
graphs  (f)  and  (g)  of  this  section  will  be 
accompanied  by  a  brief  narrative  state¬ 
ment.  The  narrative  statement  will  in¬ 
clude  an  evaluation  of  the  effect  of  the 
proposed  system  or  change,  including 
planned  disclosures  of  information 
therefrom,  on  the  potential  privacy  or 
other  personal  and  property  rights  of  in¬ 
dividuals.  In  addition,  the  narrative 
statement  will  Include  a  further  state¬ 
ment  that  the  proposed  system  or  change 
does  not  effect  the  preservation  of  the 
constitutional  principle  of  federalism 
and  separation  of  powers.  However,  if  a 
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proposed  system  or  change  does  effect 
this  principle,  the  effect  will  be  fully 
evaluated  in  the  narrative  statement. 
The  local  judge  advocate  or  legal  officer 
will  provide  assistance  in  determining 
whether  a  proposed  system  or  change 
effects  this  principle. 

(i)  Changes  to  existing  systems  not 
requiring  advance  public  notice.  Changes 
to  systems  or  records  not  stated  in  para¬ 
graph  (g)  of  this  section  do  not  require 
advanced  public  notice  before  implemen¬ 
tation.  System  managers  will  submit  to 
HQDA  (DAAG-AMR )  changes  to  exist¬ 
ing  notices  when  such  changes  are  made 
to  their  systems.  As  a  minimum,  notifica¬ 
tion  of  such  changes  will  include  the  sys¬ 
tem  identification  number  and  title,  and 
the  appropriate  section  of  the  system 
notice  revised  to  incorporate  the  changes. 
These  changes  may  be  submitted  in  hard 
copy.  DAAG-AMR  will  submit  these 
changes  to  the  OASD(C)  by  May  31  of 
each  year  for  publication  in  the  Federal 
Register’s  annual  compilation  of  system 
notices. 

(j)  Reports  control.  Reports  Control 
Symbol  DD-A  (A)  1379  is  assigned  to  the 
requirement  for  preparation  and  sub¬ 
mission  of  system  notices  and  changes. 

(k)  Existing  systems  not  covered  by  a 
public  notice.  Any  commander  who  dis¬ 
covers  a  system  of  records,  whether  it 
be  in  the  current  files  area  or  a  Federal 
Records  Center,  which  has  not  been  made 
the  subject  of  a  published  system  notice 
will  immediately  notify  HQDA  (DAAG- 
AMR),  Washington,  D.C.  20314.  The 
notification  will  inclose  a  proposed  sys¬ 
tem  notice  prepared  in  accordance  with 
the  format  and  instructions  contained 
in  8  505.6.  DAAG-AMR  will: 

(l)  If  not  predetermined,  identify  the 
applicable  system  manager. 

(2)  Coordinate  publication  of  a  pub¬ 
lic  notice,  of  discontinuance  or  rear¬ 
rangement  of  the  system  with  the  sys¬ 
tem  manager. 

(3)  Provide  the  reporting  commander 
instructions  concerning  continued  main¬ 
tenance  or  discontinuance  of  the  system. 

(1)  Prohibition  on  rearrangement  of 
-  file  series.  No  existing  files  series  will  be 

rearranged  to  permit  retrieval  by  name, 
SSN,  or  other  code  identifying  individ¬ 
uals  without  prior  publication  of  a  rec¬ 
ord  system  notice  in  the  Federal  Regis¬ 
ter.  In  effect,  such  rearrangement  con¬ 
stitutes  a  new  system  of  records.  Files 
may,  however,  be  rearranged  so  as  not  to 
permit  such  retrieval. 

(m)  Safeguarding  personal  informa¬ 
tion  in  systems  of  records.  (1)  All  sys¬ 
tems  of  records,  as  defined  in  g  505.1(e) 
(9),  will  be  safeguarded  to  insure  the 
security  and  confidentiality  of  records 
and  to  protect  against  any  anticipated 
threats  or  hazards  to  their  security  or 
integrity  which  could  result  in  substan¬ 
tial  harm,  embarrassment,  inconvenience 
or  unfairness  to  any  individual  on  whom 
information  is  maintained.  At  a  mini¬ 
mum,  these  records  will  be  safeguarded 
in  accordance  with  the  access,  storage, 
handling,  transmission,  and  destruc¬ 
tion  provisions  of  AR  340-16. 

(2)  As  required,  system  managers  will 
establish  additional  safeguards  that  are 
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tailored  to  the  particular  requirements 
of  their  systems  and  the  sensitivity  of 
the  information  contained  therein. 

(3)  Additional  safeguards  are  re¬ 
quired  for  ongoing  (in  operation)  and 
new  automated  systems  as  prescribed  in 
AR  18-1,  Management  Information  Sys¬ 
tems  Policies,  Objectives,  Procedures, 
and  Responsibilities. 

§  505.6  Instructions  and  responsibilities 
for  preparing  record  system  notices. 

(a)  Applicability.  The  notice  require¬ 
ment  specified  in  §  505.5  applies  to  all 
systems  of  records,  as  defined  in  §  505.1 
(e)  (9). 

(b)  Determination  of  systems  of  rec¬ 
ords.  Each  system  manager  is  responsi¬ 
ble  for  determining  whether  records  for 
which  he  is  responsible  to  constitute  a 
system  of  records  requiring  a  systems  no¬ 
tice.  In  this  connection,  a  system  of  rec¬ 
ords  may  consist  of  several  file  series, 
or  a  single  file  series  may  represent  more 
than  one  system.  (File  series  are  identi¬ 
fied  in  the  AR  340-2,  340-6,  and  the  AR 
340-18  series  (hereafter  referred  to  as 
the  AR  340-series) .) 

(c)  Evaluation  for  relevance  and  nec¬ 
essity.  Before  developing  a  system  notice, 
the  record  system  must  be  evaluated  for 
necessity  (5  505.5(b) ) .  If  it  is  determined 
that  the  record  system  is  irrelevant  or 
unnecessary,  action  should  be  taken,  in 
coordination  with  the  appropriate  rec¬ 
ords  manager,  to  discontinue  the  system 
and  dispose  of  the  records  involved  in  ac¬ 
cordance  with  disposition  instructions  in 
the  AR  340-series. 

(d)  Categories  of  systems  of  records. 
For  the  purpose  of  identifying  record 
systems  and  preparing  system  notices, 
there  are  five  distinguishable  categories 
of  record  systems  subject  to  the  Privacy 
Act: 

(1)  Those  established  and  maintained 
pursuant  to  and  specifically  prescribed  by 
statute,  Executive  Order,  or  Army  Regu¬ 
lation:  for  example,  medical  clinical  files 
prescribed  by  AR  40-2.  Nearly  all  such 
systems  are  identified  by  Army  Regula¬ 
tions  in  the  AR  340-series. 

(2)  Those  accumulated  in  performing 
assigned  functions,  and  for  which  estab¬ 
lishment  and  maintenance  are  not  spe¬ 
cifically  prescribed  by  statute,  Executive 
Order,  or  Army  Regulation.  These  sys¬ 
tems  are  accumulated  Army-wide  in  of¬ 
fices  that  have  identical  or  similar  func¬ 
tional  responsibilities.  Normally,  decen¬ 
tralized  segments  of  such  systems  vary 
only  in  scope  and  volume,  not  in  content; 
for  example,  name  files  which  are  estab¬ 
lished  in  processing  requests  under  the 
Freedom  of  Information  Act  (32  CFR 
Part  518).  In  most  instances,  these  sys¬ 
tems  are  identified  by  Army  Regulations 
in  the  AR  340-series. 

(3)  Those  temporarily  in  the  custody 
of  the  Army,  but  which  “belong”  to  other 
Federal  agencies.  For  example,  official 
civilian  personnel  files  on  Army  civilian 
employees  belong  to  the  US  Civil  Service 
Commission  (CSC).  Nearly  all  such  sys¬ 
tems  are  identified  by  Army  Regulations 
in  the  AR  340-series. 

(4)  Automated  Data  Processing  Sys¬ 
tems  (ADPS),  which,  as  a  rule,  are  not 
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individually  or  specifically  identified  by 
Army  Regulations  in  the  AR  340 -series, 
although  their  output  may  be  function¬ 
ally  identifiable  through  those  regula¬ 
tions.  For  preparation  of  system  notices, 
there  are  four  types  of  automated  data 
processing  systems: 

(i)  Multi-command  standard  systems 
which  are  operated  by  two  or  more  major 
commands,  for  which  an  Army  Staff 
agency  is  the  proponent,  and  for  which 
the  US  Army  Computer  Systems  Com¬ 
mand  is  the  assigned  responsible  agency. 

(ii)  Command  standard  systems  which 
are  operated  by  a  single  major  command 
at  more  than  one  data  processing  instal¬ 
lation  (DPI). 

(iii)  Army  Staff  agency /command/ 
installation-unique  systems  which  are 
operated  at  a  single  DPI. 

(iv)  Systems  in  which  the  Army  par¬ 
ticipates  or  utilizes,  but  for  which  an¬ 
other  Federal  agency  and/or  military  de¬ 
partment  or  component  of  the  Depart¬ 
ment  of  Defense  is  the  proponent  (e.g., 
WWMCCS,  IDHS,  ARPANET) . 

(5)  Those  established  and  maintained 
entirely  in  response  to  local  needs.  Al¬ 
though  often  difficult  to  described  these 
systems  have  certain  common  charac¬ 
teristics  which  can  be  used  in  identifying 
them  for  preparation  of  system  notices: 

(1)  Normally,  they  are  unique  to  the 
accumulating  office. 

(ii)  They  are  not  accumulated  Army¬ 
wide  in  other  staff  sections  or  elements 
which  perform  like  functions. 

(iii)  They  are  seldom  specifically  iden¬ 
tified  in  the  AR  340 -series. 

(iv)  They  are  often  treated  at  “uniden¬ 
tified  files”  under  the  Army  Functional 
Files  System  (TAFFS),  or  identified  as  a 
distinct  subdivision  of  a  TAFFS  record 
series  that  is  specifically  identified  in  the 
AR  340-series. 

(e)  Responsibility  for  preparation  of 
system  notices.  (1)  For  Category  1  and  2 
systems,  the  Army  Staff  agency  head  or 
major  Army  commander  having  Army- 
wide  responsibility  for  the  function  or 
process  involved  is  considered  to  be  the 
system  manager.  Such  managers  are  re¬ 
sponsible  for  Including  in  their  system 
notices  coverage  for  all  decentralized  seg¬ 
ments  of  the  particular  system. 

(2)  For  Category  3,  the  proponent  is 
the  Federal  agency  to  which  a  record 
system  belongs.  It  is  responsible  for  sys¬ 
tem  notices  applicable  to  its  records  that 
are  temporarily  in  Army  custody.  For  ex¬ 
ample,  the  CSC  will  publish  system  no¬ 
tices  applicable  to  all  record  systems  pre¬ 
scribed  by  the  Federal  Personnel  Man¬ 
ual.  CSC  will  not,  however,  be  responsi¬ 
ble  for  any  modifications  or  additions  to 
a  CSC  record  system.  The  proponent  of 
such  modifications  or  additions  is  there¬ 
fore  considered  to  be  the  system  man¬ 
ager,  and  is  responsible  for  preparing  a 
system  notice  for  the  portion  added  by 
him.  Such  system  managers  should  con¬ 
tact  the  appropriate  Federal  agency  for 
other  systems  temporarily  in  Army  cus¬ 
tody  to  determine  and  fix  responsibility 
for  preparing  applicable  system  notices. 
In  instances  where  a  Federal  agency  to 
which  the  records  belong  declines  to 
cover  a  system  temporarily  in  Army  cus¬ 
tody,  the  Army  system  manager  will  be 
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responsible  for  preparing  the  applicable 
system  notice. 

(3)  Procedures  for  reporting  Category 
4  systems  are  as  follows: 

(i)  System  managers  of  Categories  1, 

2,  3,  and  5  systems  are  responsible  for 
assuring  that  all  automated  segments  of 
their  systems  are  included  in  their  sys¬ 
tem  notices. 

(ii)  System  managers  of  ADP  systems 
defined  in  Category  4,  which  are  not 
automated  segments  of  a  Category  1,  2, 

3,  or  5  system,  are  responsible  for  prepar¬ 
ing  the  system  notices  applicable  to  their 
automated  data  processing  systems. 

(iii)  For  Type  IV  systems  within  Cate¬ 
gory  4,  the  responsible  HQDA  Staff 
agency  will  contact  the  proponent  Fed¬ 
eral  agency,  and/or  military  department 
or  component  of  the  DOD,  to  determine 
and  fix  responsibility  for  preparing  the 
applicable  system  notice.  In  instances 
where  the  proponent  declines  to  cover 
the  system,  the  HQDA  Staff  agency  will 
be  responsible  for  preparing  the  applica¬ 
ble  system  notice. 

(4)  System  managers  of  Category  5 
systems  are  responsible  for  preparation 
and  submission,  through  channels,  of 
system  notices  applicable  to  their  sys¬ 
tems. 

(f)  Addresses  in  system  notices.  To 
avoid  the  need  for  listing  all  applicable 
addresses  in  each  system  notice,  DAAG- 
AMR  will  prepare  and  publish  an  organi¬ 
zational  directory  as  a  separate  notice 
in  the  Federal  Register.  This  directory 
will  list  addresses  of  the  Office,  Secretary 
of  the  Army;  the  Office,  Chief  of  Staff, 
US  Army;  Army  Staff  agencies;  field  op¬ 
erating  and  staff  support  agencies;  head¬ 
quarters  of  major  and  subordinate  com¬ 
mands;  installations;  hospitals;  and  the 
US  Army  Military  Academy,  the  US 
Army  War  College,  and  service  schools. 
These  levels  of  addresses  should  be  con¬ 
sidered  in  providing  information  re¬ 
quired  by  paragraphs  (m)  and  (s)  to 

(u)  of  this  section. 

(g)  General.  Two  copies  of  each  sys¬ 
tem  notice  will  be  forwarded  to  HQDA 
(DAAG-AMR).  DAAG-AMR  will  review 
the  system  notices  for  accuracy,  com¬ 
pleteness,  and  uniformity,  arrange  for 
conversion  to  computer  input,  and  en¬ 
sure  that  DOD  is  provided  a  master  ADP 
tape  containing  all  Army  system  notices. 
General  instructions  for  preparing  rec¬ 
ord  system  notices  are  as  follows: 

(1)  For  each  system  of  records,  sub¬ 
mit  information  in  the  sequence  shown 
in  this  section. 

(2)  Use  all  keywords  shown  in  this  sec¬ 
tion  (i.e.,  SYSNAME,  RECORD-CATE- 
GORY,  etc.).  Explanations  of  keywords 
are  shown  in  parentheses,  but  do  not  use 
the  explanations. 

(3)  Do  not  use  paragraph  or  subpara¬ 
graph  numbers  or  letters. 

(4)  Do  not  underline  any  part  of  the 
text. 

(5)  Do  not  use  hyphenation  at  the  end 
of  the  line,  or  subdivide  a  word  at  the  end 
of  a  line. 

(6)  Do  not  reference  information  from 
other  system  notices  within  the  system  of 
records  being  described. 


(7)  Use  all  standard  typewriter  char¬ 
acters,  except  for  the  following  which 
will  be  used  as  indicated : 

(i)  Use  “+”  to  precede  each  major 
group  keyword  (e.g.,  +SYSNAME,  etc.). 

(ii)  Use  to  precede  each  major 
subgroup  keyword  (e.g.,  ‘SAFEGUARDS, 
etc.). 

(iii)  Use  “$”  to  precede  the  text  fol¬ 
lowing  major  group  or  subgroup  head¬ 
ings.  Do  not  use  subparagraphs. 

(iv)  Use  “%”  to  precede  each  line 
entry  when  addresses  require  a  column 
or  list  format.  Multiple  addresses  within 
a  single  column  are  not  permitted.  In 
instances  where  more  than  one  address 
is  required,  enter  all  addresses  in  para¬ 
graph  form,  from  left  to  right  across  the 
page. 

(v)  Do  not  use  “=”  character.  It  is 
reserved  for  other  purposes. 

(8)  All  information  will  be  typed  flush 
with  the  left  margin,  using  the  charac¬ 
ters  indicated  in  (g)  (7)  of  this  section  to 
distinguish  between  major  groupings  of 
information  and  paragraphs. 

(9)  Refer  to  §  505\7  for  systems  which 
may  qualify  for  exemption. 

(10)  Avoid  use  of  military  or  govern¬ 
ment  terminology  which  may  not  be  un¬ 
derstood  by  the  public.  Authorized  ab¬ 
breviations  may  be  used,  provided  they 
are  first  fully  spelled  out  in  each  system 
notice;  e.g..  Department  of  the  Army 
(DA). 

(11)  Number  the  pages  separately  for 
each  draft  system  notice. 

(h)  Notices  for  new  and  revised  sys¬ 
tems.  New  system  notices  and  revised  sys¬ 
tem  notices  require  advance  public  noti¬ 
fication  and  will  be  prepared  in  accord¬ 
ance  with  the  instructions  in  this  section. 
Such  notices  are  to  be  submitted  in  full 
(i.e.,  no  partial  system  notice  will  be 
accepted.) 

(i)  General.  Paragraphs  (j)  through 
(x)  of  this  section  provide  the  format 
(i.e.,  keywords  and  their  sequencing)  and 
instruction  for  developing  the  substan¬ 
tive  content  of  system  notices. 

(j)  Manual  or  automated.  Indicate 
whether  the  system  is  manual  or  auto¬ 
mated.  An  automated  system  would  in¬ 
clude  records  processed,  maintained,  or 
both,  in  a  machine  readable  medium, 
such  as  EAM  Cards,  computer  tapes,  or 
disks,  word  processing  tapes  and  cards, 
etc.  A  manual  system  would  include  rec¬ 
ords  processed,  maintained,  or  both,  in  a 
human  readable  medium  such  as  paper 
records  in  file  folders,  visible  or  vertical 
file  cards,  microfiche,  roll  microfilm,  pho¬ 
tographs,  etc.  A  mechanized  file  which 
requires  substantial  human  intervention 
for  processing  or  maintenance  is  consid¬ 
ered  to  be  manual,  rather  than  auto¬ 
mated. 

(k)  SYSNAME  ( System  Name). 
Whenever  applicable,  identify  the  sys¬ 
tem  by  number  and  title  prescribed  in  the 
AR  340-series.  Use  locally  originated 
titles  for  files  which  are  not  described 
specifically  or  adequately  in  the  AR  340- 
series  or  which  are  otherwise  unique  to 
the  reporting  office.  If  more  than  one  sys¬ 
tem  is  covered  by  a  file  description,  iden¬ 
tify  each  system.  If  several  files  (sepa¬ 


rately  described  in  the  AR  340 -series)  are 
a  part  of  a  single  system,  identify  the  sys¬ 
tem  only  (see  (p)  of  this  section,  for 
identification  of  separate  files  which 
form  a  system).  Provide  system  and  file 
title  in  unclassified  form.  Do  not  use  ab¬ 
breviations,  nicknames,  or  acronyms  un¬ 
less  spelled  out  the  first  time  used.  Place 
acronyms  in  parentheses  immediately 
following  the  title. 

(l)  Security.  Specify  the  Defense  or 
other  security  classification  for  the  sys¬ 
tem  of  records  if  classified  pursuant  to 
the  provisions  of  DOD  5200. 1-R.  Do  not 
cite  as  a  classification  “INTERNAL 
WORKING  PAPER,  EYES  ONLY,”  or 
similar  marking  used  for  internal  control 
or  other  handling  purposes.  If  unclassi¬ 
fied,  including  “FOR  OFFICIAL  USE 
ONLY,”  state  unclassified. 

(m)  Location.  If  the  system  is  main¬ 
tained  in  a  single  location,  provide  the 
exact  name  of  the  office,  organization, 
and  correspondence  or  routing  symbol. 
On  the  other  hand,  if  it  is  geographically 
or  organizationally  decentralized,  specify 
each  type  of  organization  or  element  that 
maintains  a  segment  of  the  system.  For 
example,  if  the  system  was  comprised  of 
clinical  records,  then  medical  centers  and 
hospitals,  and  the  National  Personnel 
Records  Center  would  be  listed  as  loca¬ 
tions.  Where  automated  data  systems  en¬ 
compass  a  central  computer  facility,  with 
input/output  terminals  at  several  geo¬ 
graphical  locations,  list  by  category  each 
location  under  this  heading.  In  all  in¬ 
stances  where  multiple  locations  are  re¬ 
ferred  to  by  type  of  organization,  state 
that  official  mailing  addresses  are  in  the 
Department  of  Defense  Directory  in  the 
appendix  to  the  Department  of  the  Army 
system  notices.  If  the  address  is  classi¬ 
fied,  so  state.  Be  sure  to  list  each  type  of 
organization  maintaining  a  segment  or 
duplicate  of  the  system,  since  mainte¬ 
nance  by  a  type  of  organization  not  re¬ 
ported  herein  will  constitute  a  violation 
of  the  Privacy  Act  of  1974.  When  indi¬ 
cating  domestic  addresses,  use  the  United 
States  Postal  Service  two-letter  state  ab¬ 
breviation  and  the  zip  code. 

(n)  Individual-category  ( categories  of 
individuals  covered  by  the  system).  The 
purpose  of  this  requirement  is  to  permit 
an  individual  to  determine  whether  or 
not  information  on  him  might  be  in  the 
system  of  records.  Categories  of  individ¬ 
uals,  therefore,  should  be  stated  in  easily 
understood,  nontechnical  terms  and  in¬ 
clude  all  categories  of  individuals  on 
whom  records  are  maintained.  Avoid  us¬ 
ing  broad  general  descriptions,  such  as 
“all  military  personnel,”  unless  the  sys¬ 
tem  applies  to  all  military  personnel.  For 
example,  the  Joint  Uniform  Military  Pay 
System  (JUMPS)  applies  to  all  military 
personnel  on  active  duty,  while  a  system 
of  absentee  case  files  would  apply  only  to 
deserters  and  escaped  prisoners.  All  cate¬ 
gories  of  individuals  included  in  the  sys¬ 
tem  must  be  listed,  regardless  of  the  fre¬ 
quency  of  inclusion  or  the  number  of  rec¬ 
ords  involved.  (All  future  changes  to  the 
system,  which  broaden  or  increase  the 
categories  of  individuals  covered,  will  re¬ 
quire  preparation  and  publication  of  a 
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revised  public  notice  in  the  Federal 
Register.) 

(o)  Record-category  ( categories  of  rec¬ 
ords  in  the  system).  Briefly  describe  in 
nontechnical  terms  all  types  of  records 
in  the  system.  For  example,  under 
JUMPS,  the  types  of  records  will  include, 
but  not  be  limited  to,  individual  military 
pay  records  and  substantiating  docu¬ 
ments,  such  as  certificates  for  deductions 
and  retained  military  pay  orders  and  rec¬ 
ords  of  travel  payments;  financial  record 
data  folders;  miscellaneous  military 
vouchers;  laundry  and  dry  cleaning 
statements;  copies  of  morning  or  strength 
reports  or  other  rosters;  and  personal 
financial  records.  For  automated  sys¬ 
tems,  do  not  list  source  documents  un¬ 
less  they  are  retained  and  filed  by  name, 
SSN,  or  other  individual  identifier.  In¬ 
stead,  list  the  categories  of  information 
stored  in  the  system.  Be  sure  to  include 
all  types  of  records  in  the  system,  regard¬ 
less  of  their  frequency  or  volume  of  ac¬ 
cumulation,  since  future  additions  of  new 
types  of  records  will  require  preparation 
and  publication  of  revised  public  notices 
in  the  Federal  Register. 

(p)  Authority  ( Authority  for  mainte¬ 
nance  of  the  system).  Cite  the  specific 
provision  of  a  federal  statute  or  Execu¬ 
tive  Order  of  the  President,  including  the 
title  thereof,  which  authorizes,  or  pro¬ 
vides  a  legal  basis  for,  maintenance  of  the 
system.  Do  not  cite  Army  Regulations. 
In  this  connection,  authority  for  a  sys¬ 
tem  may  be  derived  from  a  statute  or 
Executive  Order  which : 

(1)  Explicitly  authorizes  or  directs 
the  Army  to  maintain  a  system  of  rec¬ 
ords. 

(2)  Authorizes  or  directs  the  Army  to 
perform  a  function,  the  discharge  of 
which  requires  maintenance  of  the  sys¬ 
tem  of  records. 

Note:  Check  with  the  appropriate  Judge 
advocate  or  legal  officer  for  assistance  in 
determining  the  statutory  or  regulatory 
basis  for  the  system. 

(q)  Routine-uses  ( routine  uses  of  rec¬ 
ords  maintained  in  the  system,  includ¬ 
ing  categories  of  users  and  the  purposes 
of  such  uses) .  ( 1 )  Essentially,  this  re¬ 
quirement  calls  for  the  following  infor¬ 
mation  in  nontechnical  terms : 

(1)  The  purpose(s)  for  which  informa¬ 
tion  in  the  system  is  collected. 

(ii)  Each  category  of  user. 

(iii)  The  specific  use(s)  made  of  the 
information  by  each  user. 

(2)  Each  category  of  user  and  each  use 
must  be  reported.  Any  proposed  new  use 
or  category  of  user,  or  change  in  an 
existing  use,  which  has  the  effect  of  ex¬ 
panding  the  availability  of  the  informa¬ 
tion  in  the  system,  will  require  publica¬ 
tion  of  a  revised  notice  in  the  Federal 
Register.  Any  such  proposed  change  in 
a  routine  use  must  also  be  described  in 
an  advance  notice  in  the  Federal  Regis¬ 
ter  to  permit  30  days  for  public  com¬ 
ment  before  it  is  implemented. 

(3)  “Uses”  can  be  distinguished  from 
“purposes”  in  that  “purposes”  describe 
the  objectives  for  collecting  or  maintain¬ 
ing  information.  “Uses”  are  the  specific 
ways  or  processes  in  which  the  informa¬ 


tion  is  employed,  including  the  persons 
or  organizations  to  whom  the  record  may 
be  disclosed.  For  example,  the  purposes 
for  collecting  information  may  be  to 
evaluate  an  application  for  a  veteran’s 
benefit  and  to  issue  checks.  Uses  may  in¬ 
clude  verification  of  certain  information 
with  the  US  Army  Finance  Center  and 
release  of  check  data  to  the  Treasury  De¬ 
partment.  List  under  routine  uses  if  con¬ 
tractors  are  engaged  to  perform  a  serv¬ 
ice,  such  as  key  punch,  optical  scan,  or 
telecommunications  in  connection  with 
the  operation  of  an  automated  data  sys¬ 
tem.  List  also  Federal  agencies  to  which 
personal-type  information  is  disclosed, 
including  automated  system  interfaces, 
and  the  purposes  for  which  the  dis¬ 
closures  are  made. 

(4)  System  managers  must  prescribe 
the  “routine”  uses  of  the  records.  Rou¬ 
tine  use  does  not  merely  encompass  the 
common  and  ordinary  uses  to  which  re¬ 
cords  are  put,  but  also  includes  all  of 
the  proper  and  necessary  uses  regardless 
of  frequency.  For  example,  individual  in¬ 
come  tax  returns  are  routinely  used  by 
the  Internal  Revenue  Service  to  audit 
the  amount  of  tax  due  and  for  assistance 
on  collection  of  such  tax  by  civil  proceed¬ 
ings.  They  are  used  less  often,  however, 
for  referral  to  the  Department  of  Justice 
for  possible  criminal  prosecution  of 
fraud  or  tax  evasion.  Therefore,  the 
“routine”  use  of  such  records  will  in¬ 
clude  referrals  to  the  Department  of 
Justice.  In  addition,  description  of  “rou¬ 
tine  use”  shall  include  the  fact  that  any 
individual  records  in  a  system  of  records 
may  be  transferred  to  any  component  of 
the  Department  of  Defense.  It  will  be  ex¬ 
pected  normally  that  “routine  use  will 
include  disclosure  to  law  enforcement 
or  investigatory  authorities  for  inves¬ 
tigation  and  possible  criminal  prosecu¬ 
tion,  civil  court  action,  or  regulatory 
order. 

(r)  Policy -practice  ( policies  and  prac¬ 
tices  for  storing,  retrieving,  accessing, 
retaining,  and  disposing  of  records  in 
the  system) .  Describe  how  records  in  the 
system  are  managed  during  their  life- 
cycle.  When  applicable,  extract  pertinent 
information  from  the  AR  340-series. 

(1)  Storage.  In  describing  records 
storage,  specify  the  medium  in  which 
they  are  maintained,  such  as  paper  rec¬ 
ords  in  file  folders,  visible  or  vertical  file 
cards,  computer  magnetic  tapes,  or  disks, 
computer  paper  printouts,  aperture 
cards,  microfiche,  roll  microfilm,  photo¬ 
graphs,  video-tape,  etc. 

(2)  Retrievabiiity.  Specify  how  infor¬ 
mation  is  accessed  and  retrieved,  such 
as  by  name,  SSN,  military  service  num¬ 
ber  or  other  identification  number,  clas¬ 
sification  or  personal  characteristics, 
such  as  fingerprint  classification,  voice 
print  identifier,  etc.  Indicate  further 
whether  conventional  or  computerized 
indices  are  required  to  retrieve  individual 
records  from  the  system. 

(3)  Safeguards.  Describe  what  meas¬ 
ures  are  taken  to  prevent  unauthorized 
disclosure  of  the  records  and  state  the 
categories  of  individuals  authorized  ac¬ 
cess  to  the  records.  Specify  system  safe¬ 


guards,  such  as  safe,  vaults,  locked  cab¬ 
inets  or  rooms,  guards,  personnel  screen¬ 
ing,  visitor  registers,  computer  “fail¬ 
safe”  systems  software,  etc. 

Note:  Do  not  describe  security  safeguards 
In  such  detail  as  to  increase  the  risk  of  un¬ 
authorized  access  to  the  records. 

(4)  Retention  ( retention  and  dispos¬ 
al)  .  State  (from  the  AR  340-series)  how 
long  the  records  are  to  be  maintained,  if 
and  when  they  are  moved  to  Federal 
Records  Centers  or  to  the  National  Ar¬ 
chives  or  other  designated  depository; 
and  if,  when  and  how  they  are  destroyed 
or  otherwise  disposed  of.  Changes  in  this 
item  will  not  normally  require  immediate 
publication  of  a  revised  public  notice  un¬ 
less  they  reflect  an  expansion  in  the 
availability  of  or  access  to  the  system  of 
records. 

(s)  SYSMANAGER  ( title  and  duty 
address  of  the  Army  official  respon¬ 
sible  for  the  system).  In  all  cases, 
enter  the  title  of  the  official  who  is  re¬ 
sponsible  for  policies  and  procedures  gov¬ 
erning  the  system ;  i.e.,  the  Deputy  Chief 
of  Staff  for  Personnel,  HQDA,  The  Adju¬ 
tant  General,  HQDA,  etc.  For  geographi¬ 
cally  or  organizationally  decentralized 
systems,  where  individuals  may  deal  di¬ 
rectly  with  agency  officials  at  each  loca¬ 
tion  to  exercise  their  rights  under  this 
rule,  give  the  position  or  duty  title  of 
each  category  of  official  responsible  for 
the  system  or  a  segment  thereof.  For 
example,  in  the  case  of  clinical  records, 
the  entries  would  be:  The  Surgeon  Gen¬ 
eral,  HQDA;  commanders  of  medical 
centers  and  hospitals;  and  the  Director, 
National  Personnel  Records  Center,  GSA, 
111  Winnebago  Street,  St.  Louis,  Mo. 
63118.  Do  not  include  addresses,  since 
they  are  already  listed  in  the  organiza¬ 
tional  directory  mentioned  in  paragraph 
(f )  of  this  section. 

(t)  Notification  ( procedure  whereby 
individuals  can  be  notified  at  their  re¬ 
quest  if  the  system  contains  records  per¬ 
taining  to  them).  (1)  Indicate  whether 
or  not  requests  from  individuals  should 
be  addressed  to  the  above  SYSMANA¬ 
GER.  If  requests  are  to  be  addressed  to 
any  other  officials,  list  them  by  duty  or 
position  titles. 

(2)  Specify  what  information  will  be 
required  from  the  requesting  individual 
to  determine  whether  or  not  the  system 
contains  a  record  about  him,  such  as  full 
name,  military  status,  SSN  or  service 
number,  resident  or  nonresident,  etc. 

(3)  List  by  specific  name,  or  categories, 
those  offices  which  the  requester  may 
visit  to  obtain  information  on  whether 
or  not  the  system  contains  records  per¬ 
taining  to  him. 

(4)  For  personal  visits,  specify  what 
data  the  requester  must  present  as  proof 
of  identity,  such  as  a  combination  of  full 
name,  date  and  place  of  birth,  parents’ 
names,  driver’s  license,  medicare  card, 
etc.  Do  not  require  verification  of  identity 
for  records  which  are  disclosable  under 
32  CFR  Part  518. 

(u)  Access  ( procedures  whereby  an  in¬ 
dividual  can  be  notified  at  his  request 
how  he  can  gain  access  to  any  record 
pertaining  to  himself  contained  in  the 
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system  of  records).  Include  the  title  or 
category  of  officials  who  can  provide  as¬ 
sistance,  if  those  officials  are  other  than 
the  SYSMANAGER.  If  the  mailing 
addresses  are  listed  in  the  organizational 
directory,  state  that  official  mailing  ad¬ 
dresses  are  in  the  Department  of  Defense 
Directory  in  the  appendix  to  the  Depart¬ 
ment  of  the  Army’s  system  notices.  Spe¬ 
cific  locations  and  telephone  numbers  of 
offices  may  be  indicated  for  unique  or 
centralized  systems. 

(v)  Contest  ( rules  for  contesting  con¬ 
tents  of  records).  To  comply  with  this 
requirement,  merely  state:  “The  Army’s 
rules  for  access  to  records  and  for  con¬ 
testing  contents  and  appealing  initial 
determinations  are  contained  in  32 
CFR  Part  505.” 

<w)  Source  ( categories  of  sources  of 
records  in  the  system ) .  List  by  type  each 
source  of  information  in  the  system; 
e.g.,  previous  employers,  financial  insti¬ 
tutions,  educational  institutions,  trade 
associations,  or  automated  system  inter¬ 
faces.  Specific  individuals  or  institutions 
need  not  be  identified  by  name.  Again, 
be  sure  to  include  all  types,  since  collec¬ 
tion  of  information  from  types  of  sources 
other  than  those  listed  will  require  pub¬ 
lication  ~>f  a  revised  public  notice  in  the 
Federal  Register — before  any  informa¬ 
tion  is  collected  from  those  sources. 

(x)  Exemption.  For  this  item  enter  as 
applicable:  “None”  or  “Parts  of  this  sys¬ 
tem  may  be  exempt  under  §  505.7  (b)  or 
(c),  as  applicable.  For  additional  infor¬ 
mation,  contact  the  System  Manager.” 
The  actual  exemption  is  a  separate  and 
distinct  requirement  and  will  be  pub¬ 
lished  as  a  rule  in  accordance  with 
§  505.7  of  this  rule. 

(Note:  Whenever  it  is  necessary  to  omit 
certain  elements  of  a  system  notice  due  to 
an  anticipated  exemption,  after  each  key¬ 
word  affected  (e.g.,  NOTIFICATION,  AC¬ 
CESS,  CONTEST,  or  SOURCE),  enter  "$ 
See  EXEMPTION.” 

§  505.7  Exemptions. 

(a)  General.  (D  Each  system  man¬ 
ager  may,  subject  to  the  approval  of  the 
Secretary  of  the  Army,  claim  an  exemp¬ 
tion  from  certain  requirements  of  this 
rule.  There  are  two  types  of  exemptions, 
general  and  specific.  The  general  ex¬ 
emption  authorizes  the  exemption  of  a 
system  of  records  or  portion  thereof 
from  all  but  a  few  requirements  of  this 
rule.  The  specific  exemption  authorizes 
exemption  of  a  system  or  portion  thereof 
from  only  a  few  specific  requirements. 
This  section  describes  when,  how,  and 
for  what  these  exemptions  may  be 
claimed. 

(2)  It  is  the  policy  of  the  Department 
of  the  Army  to  claim  an  exemption  only 
for  those  systems  or  portions  thereof 
where  it  is  determined  to  be  in  the  best 
interests  of  the  Federal  Government  and 
in  compliance  with  the  Privacy  Act. 
System  managers  will  request  an  ex¬ 
emption  to  a  requirement  of  this  rule  only 
when  such  exemption  serves  a  necessary 
and  legitimate  governmental  purpose. 

(3)  The  Secretary  of  the  Army  will 
consider  all  requests  for  exemptions  in 


accordance  with  this  section,  determine 
which  exemptions  may  be  properly  in¬ 
voked,  and  cause  the  publication  of  such 
exemptions. 

(b)  General  exemptions.  (1)  Only 
Army  activities  which  perform  criminal 
law  enforcement  functions  as  their  prin¬ 
cipal  mission  may  claim  a  general  ex¬ 
emption  for  their  law  enforcement 
system (s)  of  records.  Criminal  law  en¬ 
forcement  includes  police  efforts  to 
prevent,  control,  or  reduce  crime,  or  to 
apprehend  criminals;  activities  of  prose¬ 
cutors  or  courts:  and  activities  of  cor¬ 
rectional,  probation,  pardon,  or  parole 
authorities. 

(2)  To  qualify  for  a  general  exemption, 
a  system  of  records  maintained  by  a 
criminal  law  enforcement  activity  must 
consist  of  one  of  the  following: 

(i)  Information  compiled  for  the  pur¬ 
pose  of  identifying  individual  criminal 
offenders  and  alleged  offenders,  and  con¬ 
taining  only  identifying  data  and  nota¬ 
tions  of  arrest,  the  nature  and  disposition 
of  criminal  charges,  sentencing,  confine¬ 
ment,  release,  and  parole  and  probation 
status. 

(ii)  Information  compiled  for  the  pur¬ 
pose  of  criminal  investigation,  including 
reports  of  informants  and  investigators, 
and  which  is  associated  with  an  identifi¬ 
able  individual. 

(iii)  Reports  identifiable  with  an  in¬ 
dividual  which  are  compiled  at  any  stage 
in  the  enforcement  of  the  criminal  laws, 
from  arrest  or  indictment  through  re¬ 
lease  from  supervision. 

(3)  Systems  for  which  a  general  ex¬ 
emption  is  claimed  may  be  exempted 
from  the  following  provisions  of  this 
rule: 

(i)  Section  505.2  (c)  through  (f ) .  Pro¬ 
viding  the  individual  access  to  his  rec¬ 
ords. 

(ii)  Section  505.2(g).  Providing  the 
individual  access  to  his  disclosure  ac¬ 
counting  record. 

(iii)  Section  505.2  (h)  through  (j). 
Provisions  dealing  with  amendment  of 
records. 

(iv)  Section  505.3(b)  (11).  Informing 
the  individual  when  his  record  is  dis¬ 
closed  under  compulsory  legal  process. 

(v)  Section  505.4(b) .  Collecting  infor¬ 
mation  directly  from  an  individual. 

Cvi)  Section  505.4(c).  Informing  indi¬ 
viduals  from  whom  information  is  re¬ 
quested. 

(vii)  Section  505.5(b).  Necessity  and 
relevance  of  personal  information. 

(viii)  Section  505.5(c).  Standards  of 
accuracy. 

(ix)  Section  505.6  (t)  through  (w). 
Notification,  Access,  Contest,  and  Source 
provisions  of  system  notices. 

(x)  The  civil  remedies  afforded  an  in¬ 
dividual  by  section  3(g)  of  the  Privacy 
Act. 

(c)  Specific  exemptions.  (1)  to  qualify 
for  a  specific  exemption,  a  system  of  rec¬ 
ords  must  contain  one  or  more  of  the 
following : 

(i)  National  security  information 
properly  classified  in  accordance  with 
Executive  Order  11652  and  DOD  Direc¬ 
tive  5200.1-R. 


(ii)  Investigative  material  compiled 
for  law  enforcement  purposes,  other  than 
material  within  the  scope  of  paragraph 
(b)  of  this  section.  This  includes  records 
compiled  during  the  course  of  an  investi¬ 
gation  of  an  alleged  or  suspected  viola¬ 
tion  of  civil  laws,  including  violations  of 
the  Uniform  Code  of  Military  Justice. 
See  32  CFR  Part  518.  However,  an  in¬ 
dividual  will  be  provided  access  to  any 
information  which  has  been  used  to  deny 
him  a  right,  benefit,  or  privilege  to  which 
he  would  otherwise  be  entitled  by  Federal 
law,  except  to  the  extent  that  disclosure 
would  reveal  the  identity  of  confidential 
sources  as  defined  in  paragraph  (c)  (2) 
of  this  section. 

(iii)  Material  maintained  in  connec¬ 
tion  with  providing  protective  services  to 
the  President  of  the  United  States  or 
other  individuals  protected  pursuant  to 
18  U.S.C.  3056. 

(iv)  Required  by  statute  to  be  main¬ 
tained  and  used  solely  as  statistical  rec¬ 
ords,  as  defined  in  §  505.1(e)  (7). 

(v)  Investigative  material  compiled 
solely  for  the  purpose  of  determining 
suitability,  eligibility,  or  qualifications 
for  Federal  civilian  employment  (wheth¬ 
er  or  not  salaried,  e.g.,  advisory  commit¬ 
tee)  ,  military  service.  Federal  contracts, 
or  access  to  classified  information  but 
only  to  the  extent  that  disclosure  would 
reveal  the  identity  of  a  confidential 
source  as  defined  in  paragraph  (c)  (2)  of 
this  section. 

(vi)  Testing  or  examination  material 
used  solely  to  determine  individual  quali¬ 
fications  for  appointment  or  promotion  in 
the  military  or  civilian  service,  but  only 
to  the  extent  that  the  disclosure  would 
compromise  the  objectivity  or  fairness  of 
the  testing  or  examination  process. 

(vii)  Evaluation  material  used  to 
determine  potential  for  promotion  in  the 
armed  services,  but  only  to  the  extent 
that  disclosure  would  reveal  the  identity 
of  a  confidential  source  as  defined  in 
paragraph  (c)  (2)  of  this  section. 

(2)  A  confidential  source,  for  purposes 
of  paragraphs  (c)(1)  (ii),  (v)  and  (vii) 
of  this  section,  is  one  who  furnished  in¬ 
formation  to  the  Government  under: 

(i)  An  express  promise  that  his 
identity  would  be  held  in  confidence.  The 
circumstances  under  which  an  individual 
may  properly  be  made  such  a  promise  are 
set  forth  in  paragraph  (d)  of  this  section. 

(ii)  An  implied  promise,  made  prior  to 
September  27,  1975,  that  his  identity 
would  be  held  in  confidence. 

(3)  Systems  which  qualify  for  a  specific 
exemption  under  paragraphs  (c)  (1)  (i) 
through  (vii)  of  this  section  may  be 
exempted  from  the  following  require¬ 
ments  of  this  rule. 

(i)  Section  505.2  (c)  through  (f). 
Providing  the  individual  access  to  his 
records. 

(ii)  Section  505.2(g) .  Providing  the  in¬ 
dividual  access  to  his  disclosure  account¬ 
ing  record. 

(iii)  Section  505.2  (h)  through  (J). 
Provisions  dealing  with  amendment  of 
records. 

(iv)  Section  505.5(b).  Necessity  and 
relevance  of  personal  information. 
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(v)  Section  505.6  (t)  through  (w). 
Notification,  Access,  Contest,  and  Source 
provisions  of  system  notices. 

(d)  Promises  of  confidentiality.  Prom¬ 
ises  of  confidentiality  are  the  exception 
rather  than  the  rule,  and  may  be  offered 
only  under  compelling  circumstances. 
Generally,  such  promises  may  be  made 
where:  (1)  The  record  to  be  compiled 
would  come  within  paragraphs  (c)(1) 
( (ii) ,  (v)  or  (vii)  of  this  section;  and  (2) 
it  is  clear  that,  but  for  this  promise,  the 
source  would  not  provide  the  informa¬ 
tion  needed.  In  such  cases  the  source 
must  first  be  informed  that  his  identity 
will  be  disclosed  to  the  individual  con¬ 
cerned,  if  requested,  unless  he  asks  for 
confidentiality.  Only  if  the  source  then 
expressly  requests  that  his  identity  not 
be  revealed  as  a  condition  of  furnishing 
any  information,  may  he  be  given  an 
express  promise  of  confidentiality.  Prom¬ 
ises  may  also  be  made  where  disclosure 
of  a  source’s  identity  would  endanger 
any  person’s  life  or  physical  safety. 

(e)  Exempted  records  in  nonexempted 
systems  of  records.  Where  a  record,  which 
is  maintained  by  any  element  of  the  Fed¬ 
eral  government  and  for  which  a  general 
or  specific  exemption  has  been  claimed, 
is  transferred  to  any  element  of  the  Army 
for  official  purposes  (e.g.,  adjudication 
or  personnel  action) ,  the  record  will  re¬ 
tain  its  exemption. 

(f)  Submission  instructions.  (1)  When 
a  system  manager  desires  to  claim  either 
a  general  or  a  specific  exemption,  he  will 
submit  to  the  DA  Privacy  Review  Board, 
HQDA  (DAAG-AMR) ,  Washington,  D.C. 
20314,  the  identification  symbol  and  title 
(as  given  in  the  related  system  notice) , 
the  specific  provisions  of  this  rule  for 
which  exemptions  are  sought,  and  the 
reasons  therefor.  A  separate  reason  need 
not  be  stated  for  each  provision  from 
which  a  system  is  being  exempted,  when 
a  single  explanation  will  serve  to  explain 
more  than  one  exempted  provision.  The 
Board  will: 

(1)  Seek  the  approval  of  the  Secretary 
of  the  Army,  through  the  General  Coun¬ 
sel. 

(ii)  On  approval  by  the  Secretary,  pre¬ 
pare  a  proposed  exemption  rule. 

(iii)  Transmit  the  proposed  rule  for 
publication  in  the  Federal  Register  as 
a  notice  of  proposed  rulemaking. 

(iv)  After  30  days  and  consideration 
of  any  public  comments,  transmit  the 
final  exemption  rule  for  publication  in 
the  Federal  Register. 

(v)  Notify  the  system  manager  of  the 
effective  date  of  the  exemption. 

(2)  The  Privacy  Act  requires  exemp¬ 
tion  rules  to  be  published  in  the  Federal 
Register  separately  from  system  notices. 
To  simplify  reference  and  use  within  the 
Army,  exemption  rules  have  been  com¬ 
bined  with  the  applicable  system  notices 
in  Army  Regulation  340-21. 

§  505.8  Instructions  for  completing  DA 
Form  4368— R. 

(a)  General.  Paragraphs  (c)  through 
(f)  of  this  section  should  also  be  used  in 
preparing  Privacy  Act  Statements  for 
incorporation  in  the  body  of  a  form, 
format,  questionnaire,  survey  sheet,  or 
report  subject  to  this  regulation. 


(b)  Title  of  form  and  prescribing  di¬ 
rective.  Enter  the  title  and  the  prescrib¬ 
ing  directive  of  the  form  to  which  the 
notification  statement  pertains. 

(c)  Authority.  (1)  Specify  the  statif® 
tory  authority  or  Executive  Order  requir¬ 
ing  the  information.  If  no  authority 
exists  for  collection  of  the  specific  infor¬ 
mation  required  on  the  form,  cite  the 
statute  or  Executive  Order  authorizing 
the  program  or  function  which  employs 
the  form.  When  the  specific  program  or 
function  cannot  be  identified  under  stat¬ 
ute  or  Executive  Order,  cite  the  appro¬ 
priate  general  “housekeeping”  statute 
which  assigns  to  the  Secretary  of  the 
Army  the  broad  functional  responsibility 
for  the  area  of  concern.  Citation  of  such 
a  statute  is  limited  to  occasions  when 
thorough  research  has  failed  to  reveal  a 
more  specific  authority,  and  when  cita¬ 
tion  of  the  statute  has  been  concurred 
in  by  The  Judge  Advocate  General  or 
staff  judge  advocate/ legal  officer  of  the 
agency  or  command  concerned.  Propo¬ 
nents  will  not  cite  Department  of  Defense 
Directives  or  Instructions,  Army  Regu¬ 
lations,  or  other  comparable  departmen¬ 
tal  or  local  directives,  except  as  authority 
for  collecting  the  SSN  alone. 

(2)  The  following  housekeeping  stat¬ 
utes  are  cited  as  a  guide  to  proponents 
when  a  more  specific  authority  cannot  be 
determined : 

(i)  Title  10,  United  States  Code,  sec¬ 
tion  3012:  Use  for  forms  having  an  Army 
Regulation  as  a  prescribing  directive. 

(ii)  Title  5,  United  States  Code,  sec¬ 
tion  301:  Use  for  other  forms  not  de¬ 
scribed  above. 

(3)  Coordination  with  The  Judge  Ad¬ 
vocate  General  or  staff  judge  advocate/ 
legal  officer  of  the  agency  or  command 
concerned  is  mandatory  before  citing  one 
of  the  above  statutes  as  authority.  Other 
authority  citations  may  be  coordinated 
as  necessary  with  the  appropriate  legal 
staff  to  assure  their  validity. 

(d)  Principal  purpose(s) .  State  the 
principal  purpose  or  purposes  for  which 
the  information  is  collected.  “Purposes” 
are  distinguished  from  “uses”  (e),  in 
that  purposes  describe  the  objectives  for 
collecting  the  information.  Uses,  on  the 
other  hand,  are  the  specific  ways  or  proc¬ 
esses  in  which  the  information  may  be 
disclosed.  For  example,  the  purpose  of 
collecting  information  may  be  to  eval¬ 
uate  an  application  for  a  veteran’s  bene¬ 
fit  and  to  issue  checks  upon  establish¬ 
ment  of  eligibility.  Uses  might  include 
verification  of  certain  information  with 
the  appropriate  military  services  and  re¬ 
lease  of  check  data  to  the  Treasury 
Department. 

(e)  Routine  uses.  List  all  routine  uses 
which  may  be  made  of  the  information 
collected.  Uses  of  the  SSN  will  be  sepa¬ 
rately  stated,  if  applicable.  Each  pro¬ 
ponent  of  a  form  or  format  subject  to  the 
Privacy  Act  must  prescribe  its  “routine” 
uses.  “Routine  use”,  as  defined  in  the 
Privacy  Act,  means  the  use  of  a  record 
or  information  for  a  purpose  which  is 
compatible  with  the  purpose  for  which 
it  was  collected.  “Routine  use”  does  not 
merely  encompass  the  common,  ordinary 
uses  of  the  form,  but  also  includes  all  the 
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proper  and  necessary  uses,  regardless  of 
frequency.  For  example,  individual  in¬ 
come  tax  returns  are  routinely  used  by 
the  Internal  Revenue  Service  to  audit 
the  amount  of  tax  due  and  to  assist  in 
collecting  such  tax  by  civil  proceedings. 
They  are  used  less  often,  however,  for 
referral  to  the  Department  of  Justice  for 
possible  criminal  prosecution  for  fraud 
or  tax  evasion.  Nevertheless,  the  routine 
uses  of  such  records  would  also  include 
referrals  to  the  Department  of  Justice. 

(f)  (1)  Mandatory  or  voluntary  dis¬ 
closure  and  effect  on  individual  not  pro¬ 
viding  information. 

(2)  Indicate  whether  providing  the  in¬ 
formation  is  mandatory  or  voluntary, 
and  the  effect  on  the  individual  of  not 
providing  all  or  any  part  of  the  requested 
information.  Indicate  separately  whether 
disclosure  of  the  SSN  is  mandatory  or 
voluntary,  as  applicable. 

(g)  Form  number.  Type  the  same  num¬ 
ber  as  the  form  to  which  the  statement 
applies,  followed  by  the  phrase,  “Privacy 
Act  Statement”,  in  the  box  at  the  lower 
left  comer.  For  example,  the  statement 
for  DD  Form  398  (Statement  of  Personal 
History)  will  show  in  the  lower  left  cor¬ 
ner  the  number  “DD  Form  398 — Privacy 
Act  Statement — 26  Sep  75.”  The  forms 
management  officer  will  assign  a  forms 
control  number  to  statements  that  ac¬ 
company  unnumbered  formats,  ques¬ 
tionnaires,  survey  sheets  and  reports. 
This  identification  will  be  in  addition  to 
the  reports  control  symbol  or  OMB  ap¬ 
proval  number  authorizing  collection  of 
the  information.  All  notification  state¬ 
ments  will  show  September  26,  1975  as 
the  date  of  approval  when  prepared  prior 
to  that  date.  Upon  completion  of  the 
form,  the  DA  Form  4368-R  identification 
will  be  deleted. 

§  505.9  Exemption  rules  for  Army  sys¬ 
tems  of  records. 

(a)  General.  This  section  contains  ex¬ 
emption  rules  for  systems  of  records 
maintained  by  the  Department  of  the 
Army.  System  notices  have  been  omitted 
from  this  section,  since  they  are  pub¬ 
lished  in  the  Federal  Register,  Volume 
40,  Number  160,  Part  n.  Section  1, 
August  18,  1975. 

(b)  Exemptions.  The  Secretary  of  the 
Army  proposes  to  designate  the  systems 
of  records  listed  below  for  exemptions 
under  the  specified  provisions  of  the 
Privacy  Act  of  1974  (Public  Law  93-579) . 
In  addition  to  specific  exemptions 
claimed  pursuant  to  §  505.7,  paragraph 

(c)  below,  any  document  properly  classi¬ 
fied  in  accordance  with  DOD  Directive 
5200. 1-R  and  Executive  Order  11652,  and 
included  in  a  system  of  records,  may  be 
exempted  pursuant  to  §  505.7,  paragraph 
(c)  (1)  (i)  from  the  provisions  of  §  505.2, 
paragraphs  (c)  through  (j).  This  exemp¬ 
tion  is  necessary  because  certain  record 
systems  not  otherwise  specifically  desig¬ 
nated  for  exemption  may  subsequently 
include  occasional  documents  which  have 
been  properly  classified. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0201  08aDACS. 

SYSNAME — Central  Files,  Office  of  the 
Chief  of  Staff  (DACS-DAS) . 
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EXEMPTION — Selected  documents  In  this 
system  of  records  are  exempted  from  the  fol¬ 
lowing  provisions  of  Title  5  USC,  section  552a: 
(0(3),  (d).  (e)(1),  (e)(4)(G),  (e)(4)(H), 
(e)(4)  (I),  and  (f). 

AUTHORITY— 5  USC  552a(k)  (1)  thru  (7). 
REASONS — This  system  contains  docu¬ 
ments  pertaining  to  any  function  or  subject 
which  may  require  Involvement  of  the  De¬ 
partment  of  the  Army.  Documents  in  this  file 
are  generated  by  other  elements  of  the  Army 
or  are  received  from  other  agencies  and  indi¬ 
viduals.  Because  of  the  broad  scope  of  the 
contents  of  this  file,  and  since  the  introduc¬ 
tion  of  documents  Included  therein  is  largely 
unregulatable,  the  specific  portions  or  docu¬ 
ments  in  this  system  which  may  require  an 
exemption  cannot  be  predetermined.  There¬ 
fore  and  to  the  extent  that  such  material  is 
received  and  maintained,  selected  individual 
documents  may  be  exempted  from  disclosures 
under  any  of  the  provisions  of  subsection  k, 
Title  5  USC  552a.  Such  records  Include  mate¬ 
rial  properly  classified  under  Executive  Order 
11652;  investigatory  material  compiled  for 
law  enforcement  purposes;  material  main¬ 
tained  in  connection  with  providing  protec¬ 
tive  services  to  the  President  or  other  indi¬ 
viduals;  material  required  to  be  used  6olely 
as  statistical  records;  investigatory  material 
compiled  for  determining  suitability,  eligibil¬ 
ity,  and  qualifications  for  Federal  civilian 
employment,  military  service,  Federal  con¬ 
tracts,  or  access  to  classified  information;  and 
testing  or  examination  material  used  In  de¬ 
termining  qualifications  for  appointment  or 
promotion  in  the  Federal  services  or  armed 
services. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0201.08bDAAG. 

SYSNAME — Privacy  Act  Request  File. 

EXEMPTION — This  system  of  records  is  ex¬ 
empt  from  the  following  provisions  of  Title 
6  USC,  section  552a:  (d);  (e)(4)(H);  (f) 
(2),  (3)  and  (4). 

AUTHORITY— Title  5  USC,  section  552a, 
subsections  (k)  (1)  thru  (7). 

REASONS — This  system  of  records  is  main¬ 
tained  solely  for  the  purpose  of  administer¬ 
ing  the  Privacy  Act  of  1974.  To  insure  an  ac¬ 
curate  and  complete  file  on  each  case  it  is 
sometimes  necessary  to  include  copies  of  rec¬ 
ords  which  have  been  the  subject  of  a  Pri¬ 
vacy  Act  request.  This  situation  applies  prin¬ 
cipally  to  cases  in  which  an  Individual  has 
been  denied  access  and/or  amendment  of 
personal  records  under  an  exemption  au¬ 
thorized  by  Title  5  USC,  section  552a.  The 
same  justification  for  the  original  denial 
would  apply  to  a  denial  of  access  and/or 
amendment  of  copies  maintained  in  the  Pri¬ 
vacy  Act  Request  File.  It  should  be  empha¬ 
sized  that  the  majority  of  records  in  this 
system  are  available  on  request  to  the  Indi¬ 
vidual  and  that  all  records  are  used  solely  to 
administer  Privacy  Act  requests.  This  file  is 
not  used  to  make  any  other  determinations 
on  the  rights,  benefits  or  privileges  of  indi¬ 
viduals. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0202.08  DAAG. 

SYSNAME — Request  for  Information  Files. 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of 
Title  6,  United  States  Code,  section  552a: 
(c)(3);  (d);  (e)(4)(G);  (e)(4)(H);  and 

<f). 

AUTHORITY— 5  USC  552a  (k)(l),  (k)  (2) 
and  (k) (5). 

REASONS — This  system  of  records  contains 
information  which  is  exempt  from  release: 
a.  because  it  is  authorized  to  be  kept  secret 
in  the  interest  of  national  defense  or  foreign 


policy;  b.  contains  investigatory  material 
compiled  solely  for  the  purpose  of  determin¬ 
ing  eligibility  for  access  to  classified  infor¬ 
mation,  and  c.  contains  personal  information 
about  individuals,  other  than  the  subject, 
the  disclosure  of  which  would  constitute  a 
clearly  unwarranted  invasion  of  privacy.  Por¬ 
tions  of  these  files,  accordingly,  may  not  be 
made  accessible  to  the  subject  and  are  ex¬ 
empted  from  the  requirements  of  those  sec¬ 
tions  of  5  USC  552a  cited  above. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— AO224.04  DAIG. 

SYSNAME — Inspector  General  Investiga¬ 
tive  Files. 

EXEMPTION — Selected  portions  and/or 
records  of  this  system  are  exempt  from  the 
following  provisions  of  Title  5  USC  652a: 
subsections  (d)  and  (f). 

AUTHORITY— 5  USC  552a(k)  (2)  and  (6). 
REASONS — Selected  portions  and/or  rec¬ 
ords  in  the  system  constitute  Investigatory 
material  compiled  for  law  enforcement  pur¬ 
poses  or  Investigatory  material  compiled 
solely  for  the  purpose  of  determining  suit¬ 
ability,  eligibility,  or  qualifications  for  Fed¬ 
eral  civilian  employment,  military  service, 
Federal  contracts,  or  access  to  classified 
information. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — AO224.05DAIG. 

SYSNAME — Inspector  General  Complaint 
Files. 

EXEMPTION — Selected  portions  and/or 
records  of  this  system  are  exempt  from  the 
following  provisions  of  Title  5,  United  States 
Code,  section  552a:  subsections  (d)  and  (f). 

AUTHORITY— 5  U.S.C.  552a (k)  (2)  and 
(5). 

REASONS — Selected  portions  and/or  rec¬ 
ords  in  this  system  constitute  investigatory 
material  compiled  for  law  enforcement  pur¬ 
poses  or  investigatory  material  compiled  sole¬ 
ly  for  the  purpose  of  determining  suitability, 
eligibility,  or  qualifications  for  Federal  civil¬ 
ian  employment,  military  service,  Federal 
contracts,  or  access  to  classified  information. 

Exempted  Record  Systems 
(General  Exemptions) 
ID-A0225.01.1DAPE. 

SYSNAME — Military  Police  Management 
Information  System  (MPMIS);  Vehicle  Reg¬ 
istration  System  (VRS)  and  Correctional  Re¬ 
porting  System  (CRS)  portions  only. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section  552a : 
(c)(3),  (c)(4),  (d),  (e)(2),  (e)(3),  (e)(4) 
(G).  (e)(4)(H),  (e)(4)  (I),  (e)(5),  (e)(8), 
(f),  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)(2). 
REASONS — Granting  individuals  access  to 
Information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly 
investigations  and  with  the  orderly  admin¬ 
istration  of  Justice.  Disclosure  of  this  in¬ 
formation  could  result  in  the  concealment 
of  evidence  and  Jeopardize  the  safety  and 
well  being  of  Informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  Information 
could  also  reveal  and  render  Ineffectual  in¬ 
vestigative  techniques,  sources  and  methods 
used  by  this  component  and  could  result  in 
the  invasion  of  the  privacy  of  Individuals 
only  incidentally  related  to  an  investigation. 

The  exemption  of  the  Individual’s  right 
of  access  to  his  records  and  the  reasons 
therefor  necessitate  the  exemption  of  this 


system  of  records  from  the  requirements  of 
the  other  cited  provisions. 

Exempted  Records  Systems 
(Specific  Exemptions) 

ID — A0228.01  DAMH. 

SYSNAME — Historian's  Background  Ma¬ 
terial. 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
6,  United  States  Code,  Section  552a:  (d). 
AUTHORITY— 5  U.S.C.  562a(k)(l). 
REASONS — Material  currently  and  prop¬ 
erly  classified  under  Executive  Order  11652 
would  have  to  be  withheld  from  an  indi¬ 
vidual  without  the  required  security  clear¬ 
ance.  In  the  maloritv  of  such  cases,  the  ma¬ 
terial  will  be  submitted  for  declassification, 
or  an  individual  will  be  advised  of  the  pro¬ 
cedure  for  obtaining  the  security  clearance 
necessary  to  gain  access  to  the  desired  classi¬ 
fied  material. 

Exempted  Record  Systems 
(General  Exemptions) 

ID— A0401 .02  U8ACIDC. 

SYSNAME — Public  Information,  Adminis¬ 
trative,  and  Reference  Paper  Files. 

EXEMPTION — This  system  of  records  is 
exemnted  from  the  fallowing  provisions  of 
the  Title  5.  United  States  Code,  Section  562a: 
(c)(3),  (c)<4>,  (d),  (e)(1),  (e)(2),  (e)(3), 
(e)(4)(G),  (e)(4)(H),  (e)  (4)  (I) ,  (e)(5), 
(e)(8),  it),  (g),  and  (o). 

AUTHORTTY— 5  U.S.C.  552a(J)(2). 
REASONS — Granting  individuals  access  to 
those  portions  of  the  svstem  of  records  col¬ 
lected  and  maintained  by  this  component 
relating  to  the  enforcement  of  criminal  laws 
could  interfere  with  orderly  Investigations 
and  with  the  orderly  administration  of  Jus¬ 
tice.  Disclosure  of  this  information  could 
result  in  the  concealment  of  evidence  and 
Jeopardize  the  safety  and  well  being  of  in¬ 
formants,  witnesses  and  their  families,  and 
law  enforcement  perc-°nn“l  and  their  fam¬ 
ilies.  Disclosure  of  this  information  could 
also  reveal  and  render  ineffectual  investiga¬ 
tive  techniques,  sources  and  methods  used 
by  this  component  and  could  result  in  the 
invasion  of  the  privacy  of  individuals  only 
Incidentally  related  to  an  investigation. 

The  exemption  of  the  Individual’s  right  of 
access  to  his  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  other 
cited  provisions. 

Because  of  the  nature  of  the  criminal  law 
enforcement  function  and  the  extreme  diffi¬ 
culty  in  circumscribing  criminally  relevant 
information,  the  requirement  to  maintain 
information  which  is  strictly  relevant  to  this 
function  could  prevent  the  complete  and 
timely  investigation  of  criminal  offenses 
which  are  initiated  by  or  involve  theoretically 
nonrelevant  information. 

The  requirement  to  renort  new  systems  of 
records  to  Congress  would  potentially  entail 
substantial  delay  and  premature  disclosure, 
and  could  unduly  Impede  the  timely  and 
effective  utilization  of  new  methods  or  pro¬ 
cedures  which  facilitate  the  enforcement  of 
criminal  laws. 

Exempted  Record  Systems 
(General  Exemptions) 

ID— A0401  08DA  JA. 

SYSNAME — Prosecutorial  Files. 
EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of  the 
Title  5,  United  States  Code,  section  652a: 
(c)(3),  (0(4),  (d),  (e)(2),  (e)(3),  (e)(4) 
(G).  (e)(4)(H),  (e)(4)  (I),  (e)(6),  (e)(8), 
(f),  and  (er> . 

AUTHORITY— 5  U.S.C.  552a(J)  (2) . 
REASONS — Granting  individuals  access  to 
Information  oollected  and  maintained  by  this 
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component  relating  to  the  enforcement  of 
criminal  laws  could  Interfere  with  orderly 
Investigations  and  with  the  orderly  adminis¬ 
tration  of  Justice.  Disclosure  of  this  Informa¬ 
tion  could  result  In  the  concealment  of  evi¬ 
dence  and  Jeopardize  the  safety  and  well¬ 
being  of  Informants;  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  Informa¬ 
tion  could  also  reveal  and  render  ineffectual 
investigative  techniques,  sources  and  meth¬ 
ods  used  by  this  component  and  could  result 
In  the  invasion  of  the  privacy  of  Individuals 
only  incidentally  related  to  an  Investigation. 

The  exemption  of  the  Individual's  right  of 
access  to  his  records  and  the  reasons  therefor 
necessitate  the  exemption  of  this  system  of 
records  from  the  requirements  of  the  other 
cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID— A04 1 1  03US  ACIDC . 

SYSNAME — Release  of  Information  Action 
Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4),  (d),  (e)(1),  (e)(2).  (e)(3). 
(e)(4)(G),  (e)(4)(H),  (e)(4)  (I),  (e)(5). 
(e)(8), (f),  (g)  and  (o). 

AUTHORITY— 5  U.S.C.  552a(J)(2). 

REASONS — Granting  individuals  access  to 
those  portions  of  the  system  of  records  col¬ 
lected  and  maintained  by  this  component  re¬ 
lating  to  the  enforcement  of  criminal  laws 
could  interfere  with  orderly  investigations 
and  with  the  orderly  administration  of  Jus¬ 
tice.  Disclosure  of  this  Information  could  re¬ 
sult  in  the  concealment  of  evidence  and 
jeopardize  the  safety  and  well-being  of  In¬ 
formants,  witnesses  and  their  families,  and 
law  enforcement  personnel  and  their  fam¬ 
ilies.  Disclosure  of  this  Information  could 
also  reveal  and  render  ineffectual  investiga¬ 
tive  techniques,  sources  and  methods  used 
by  this  component  and  could  result  in  the 
invasion  of  the  privacy  of  individuals  only 
Incidentally  related  to  an  investigation. 

The  exemption  of  the  individual's  right  of 
access  to  his  records  and  the  reasons  therefor 
necessitate  the  exemption  of  this  system  of 
records  from  the  requirements  of  other  cited 
provisions. 

Because  of  the  nature  of  the  criminal  law 
enforcement  function  and  the  extreme  diffi¬ 
culty  in  circumscribing  criminally  relevant 
information,  the  requirement  to  maintain 
Information  which  is  strictly  relevant  to  this 
function  could  prevent  the  complete  and 
timely  Investigation  of  criminal  offenses 
which  are  Initiated  by  or  Involve  theoretically 
non-relevant  Information. 

The  requirement  to  report  new  systems 
of  records  to  Congress  would  potentially  en¬ 
tail  substantial  delay  and  premature  disclo¬ 
sure,  and  could  unduly  Impede  the  timely 
and  effective  utilization  of  new  methods  or 
procedures  which  facilitate  the  enforcement 
of  criminal  laws. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0501 .08  (a)  DAMI. 

SYSNAME — Interception  of  Wire  and  Oral 
Communications  Quarterly  Reports  and  Mo¬ 
tions  for  Discovery. 

EXEMPTION — This  system  of  records  Is 
exempt  from  the  following  provisions  of 
Title  5,  United  States  Code,  Section  552a: 
3(d).  (e)  (4)  (H)  and  (I),  and  (f). 

AUTHORITY— 5USC  552a(k)  (1),  (2)  and 
(5). 

REASONS — Material  contained  In  this 
record  system  which  Is  properly  and  cur¬ 
rently  classified  under  the  provisions  of  Ex¬ 
ecutive  Order  11652  contains  data  concern¬ 


ing  sensitive  sources  and  operational  meth¬ 
ods  whose  dissemination  must  be  strictly 
controlled  because  of  Its  relationship  to  na¬ 
tional  security  intelligence  considerations. 
Additionally,  In  the  conduct  of  such  oper¬ 
ations  which  produce  these  records,  at  times 
the  methods  and  arrangements  with  our  Al¬ 
lies  pertinent  to  conduct  of  lntellllgence  op¬ 
erations  are  relevant  to  this  issue  of  national 
security  interests  and  must  be  safeguarded. 
Also,  release  would  compromise  and  thus 
negate  specialized  techniques  used  to  sup¬ 
port  intelligence  programs,  and  release  would 
interfere  with  and  negate  the  orderly  con¬ 
duct  of  Intelligence  operations. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0501. 08(b)  DAMI. 

SYSNAME — Department  of  the  Army  Oper¬ 
ational  Support  Activities  Files. 

EXEMPTIONS — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  Section  552a:  (c)  (3); 
(d);  (e)(1);  (e)(4)  (G),  (H);  and  (f). 

AUTHORITY— 5  USC  562a(k)  (1)  and  (5). 

REASONS — Executive  Order  11652  provides 
for  the  protection  of  official  information  and 
material  which,  because  It  bears  directly  on 
the  effectiveness  of  our  national  defense  and 
the  conduct  of  our  foreign  relations,  must 
be  limited  In  its  accessibility.  To  protect 
against  hostile  actions,  both  overt  and  covert, 
It  Is  essential  that  such  official  Information 
and  material  be  given  only  limited  dissemi¬ 
nation.  Additionally,  the  following  factors  are 
at  Issue  In  disclosure  of  data  from  this  sys¬ 
tem  of  records:  release  of  exempted  Infor¬ 
mation  would  endanger  the  safety  of  sources 
Involved  In  Intelligence  programs:  release 
would  invade  the  privacy  of  those  individuals 
Involved  In  Intelligence;  release  would  com¬ 
promise  and  thus  negate  specialized  tech¬ 
niques  used  to  support  Intelligence  programs; 
and  release  would  lnterefere  with  and  negate 
the  orderly  conduct  of  Intelligence  oper¬ 
ations. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0501.08USACIDC. 

SYSNAME — Informant  Register, 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of 
Title  5,  United  States  Code,  Section  562a: 
(c)(3),  (d).  (e)(1),  (f)(2),  (f)(3),  (f)(4), 
and  (f)(5). 

AUTHORITY— 5  USC  552a (k)  (5). 

REASONS — The  US  Army  Criminal  Inves¬ 
tigation  Command  (USACIDC)  Is  a  criminal 
law  enforcement  component,  and  Informants 
are  periodically  employed  In  the  accomplish¬ 
ment  of  that  mission.  Disclosure  of  portions 
of  the  information  In  this  system  of  records 
to  the  individual  would  seriously  Impair  the 
prudent  and  efficient  handling  of  these 
uniquely  functioning  Individuals.  Disclosure 
to  the  individual  could  hamper  the  Inclusion 
of  comments  and  evaluations  concerning  the 
performance,  qualifications,  character,  suit¬ 
ability,  and  propensities  of  the  particular 
informant.  Disclosure  could  prematurely 
compromise  criminal  investigations  which 
either  concern  the  conduct  of  the  informant 
himself  or  investigations  wherein  he/she  is 
integrally  or  only  peripherally  involved. 

The  exemption  of  the  Individual’s  right  of 
access  to  his  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  other 
cited  provisions. 

Maintaining  information  about  infor¬ 
mants  which  Is  strictly  relevant  to  the 
criminal  law  enforcement  function  could 
prevent  the  effective  utilization  of  the  Indi¬ 
vidual  and  substantially  increase  the  oper¬ 
ational  hazards  incumbent  to  the  employ¬ 


ment  of  an  Informant  possessing  unknown 
characteristics. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID-A0501 .10DAMI. 

SYSNAME — Counterintelligence  Research 
File  System  (CIRFS). 

EXEMPTION — This  system  of  records  Is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  Section  552a:  (c)  (3) ; 
(d);  (e)(1);  (e)(4)  (G),  (H),  (I);  and  (f). 

AUTHORITY— 5USC  552a(k)  (1)  and  (5). 

REASONS — Executive  Order  11652  provides 
for  the  protection  of  official  information  and 
material  which,  because  it  bears  directly  on 
the  effectiveness  of  our  national  defense 
and  the  conduct  of  our  foreign  relations, 
must  be  limited  in  Its  accessibility.  To  pro¬ 
tect  against  hostile  actions,  both  overt  and 
covert.  It  Is  essential  that  such  official  in¬ 
formation  and  material  be  given  only  lim¬ 
ited  dissemination.  Additionally,  the  follow¬ 
ing  factors  are  at  Issue  in  disclosure  of  data 
from  this  system  of  records:  release  of  ex¬ 
empted  Information  would  endanger  the 
safety  of  sources  Involved  in  Intelligence 
programs;  release  would  Invade  the  privacy 
of  those  Individuals  Involved  In  Intelligence 
programs;  release  would  compromise  and 
thus  negate  specialized  techniques  used  to 
support  Intelligence  programs;  and  release 
would  Interfere  with  and  negate  the  orderly 
conduct  of  Intelligence  operations. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0501 .1 1DAMI. 

SYSNAME— List  of  Hostile  Intelligence 
Collectors  of  Unclassified  Military  Informa- 
tion  (LHICUMI) . 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  Section  552a:  (c)  (3); 
(d);  (e)(1);  (e)(4)  (G).  (H);  and  (f). 

AUTHORITY— 5  USC  552a(k)  (1)  and  (5). 

REASONS — Executive  Order  11652  pro¬ 
vides  for  the  protection  of  official  Informa¬ 
tion  and  material  which,  because  it  bears  di¬ 
rectly  on  the  effectiveness  of  our  national 
defense  and  the  conduct  of  our  foreign  rela¬ 
tions,  must  be  limited  In  Its  accessibility.  To 
protect  against  hostile  actions,  both  overt 
and  covert,  it  Is  essential  that  such  official 
Information  and  material  be  given  only  lim¬ 
ited  dissemination.  Additionally,  the  follow¬ 
ing  factors  are  at  Issue  in  disclosure  of  data 
from  this  system  of  records:  release  of  ex¬ 
empted  Information,  would  endanger  the 
safety  of  sources  Involved  In  intelligence  pro¬ 
grams;  release  would  Invade  the  privacy  of 
those  Individuals  involved  In  Intelligence 
programs;  release  would  compromise  and 
thus  negate  specialized  techniques  used  to 
support  intelligence  programs;  and  release 
would  Interfere  with  and  negate  the  orderly 
conduct  of  Intelligence  operations. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID-A0501 .1 2DAMI. 

SYSNAME — Subversion  and  Espionage  Di¬ 
rected  Against  the  US  Army  (SAEDA). 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  Section  552a:  (c)  (3); 
(d);  (e)(1);  (e)(4)  (G),  (H),  (I);  and  (f). 

AUTHORITY— 5  USC  552a(k)  (1)  and  (5). 

REASONS — Executive  Order  11652  provides 
for  the  protection  of  official  information  and 
material  which,  because  It  bears  directly  on 
the  effectiveness  of  our  national  defense  and 
the  conduct  of  our  foreign  relations,  must  be 
limited  in  its  accessibility.  To  protect  against 
hostile  actions,  both  overt  and  covert.  It  is 
essential  that  such  official  Information  and 
material  be  given  only  limited  dissemination. 
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Additionally,  the  following  factors  are  at 
issue  in  disclosure  of  data  from  this  system 
of  records:  release  of  exempted  information 
would  endanger  the  safety  of  sources  involved 
in  intelligence  programs;  release  would  in¬ 
vade  the  privacy  of  those  individuals  involved 
in  intelligence  programs;  release  would  com¬ 
promise  and  thus  negate  specialized  tech¬ 
niques  used  to  support  intelligence- programs; 
and  release  would  interfere  with  and  negate 
the  orderly  conduct  of  intelligence  operations. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0501 .1 3D  AMI. 

SYSNAME — Directory  of  Known  or  Suspect 
Hostile  Intelligence  Personalities  (DOK 
SHIP). 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of 
Title  5,  United  States  Code,  Section  552a: 

(c) (3);  (d);  (e)(1);  (e)(4)  (Q),  (H),  (I); 
and  (f). 

AUTHORITY— 5  USC  552a (k)  (1)  and  (5). 

REASONS — Executive  Order  11652  pro¬ 
vides  for  the  protection  of  official  informa¬ 
tion  and  material  which,  because  it  bears 
directly  on  the  effectiveness  of  our  national 
defense  and  the  conduct  of  our  foreign  rela¬ 
tions,  must  be  limited  in  its  accessibility.  To 
protect  against  hostile  actions,  both  overt 
and  covert,  it  is  essential  that  such  official 
information  and  material  be  given  only 
limited  dissemination.  Additionally,  the  fol¬ 
lowing  factors  are  at  issue  in  disclosure  of 
data  from  this  system  of  records:  release  of 
exempted  information  would  endanger  the 
safety  of  sources  involved  in  intelligence  pro¬ 
grams;  release  would  invade  the  privacy  of 
those  individuals  Involved  in  intelligence 
programs;  release  would  compromise  and 
thus  negate  specialized  techniques  used  to 
support  intelligence  programs;  and  release 
would  Interfere  with  and  negate  the  orderly 
conduct  of  intelligence  operations. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0502.03DAMI. 

SYSNAME — Intelligence  Collection  Files. 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  Section  522a:  3(c)  (3) ; 

(d) ;  (e)(1);  (e)(4)  (G),  (H).  (I);  and  (f). 

AUTHORITY— 5  USC  562a(k)  (1),  (5). 

REASONS — Executive  Order  11652  pro¬ 
vides  for  the  protection  of  some  official  in¬ 
formation  and  material  which,  because  it 
bears  directly  on  the  effectiveness  of  our  na¬ 
tional  defense  and  the  conduct  of  our  for¬ 
eign  relations,  must  be  subject  to  some  con¬ 
straints  for  the  security  of  our  Nation  and 
the  safety  of  our  people  and  our  allies.  To 
protect  against  actions  hostile  to  the  United 
States,  of  both  overt  and  covert  nature,  it  is 
essential  that  such  official  information  and 
material  be  given  only  limited  dissemination. 
This  exemption  is  also  essential  to  protect 
the  privacy  and  personal  safety  of  the  sources 
involved.  It  is  vital  to  the  conduct  of  secure 
operations  under  Director,  Central  Intelli¬ 
gence  Directives  4  and  5  and  Defense  Intel¬ 
ligence  Agency  Manual  58-11. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0502.10DAMI. 

SYSNAME — United  States  Army  Intelli¬ 
gence  Agency  (USAINTA)  Investigative  File 
System. 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  Section  552a:  3  (d) 
and  (e),  (4)  (H)  and  (I). 

AUTHORITY— 5  USC  552a(k)  (1),  (2)  and 
(5). 

REASONS — That  material  contained  in 
this  record  system  which  is  properly  and  cur¬ 
rently  classified  under  the  provisions  of  Exec¬ 


utive  Order  11652  contains  data  concerning 
sensitive  sources  and  operational  methods 
whose  dissemination  must  be  strictly  con¬ 
trolled  because  of  its  relationship  to  na¬ 
tional  security  intelligence  considerations. 
Additionally,  in  the  conduct  of  such  opera¬ 
tions  which  produce  these  records,  at  times 
the  methods  and  arrangements  with  our  Al¬ 
lies  pertinent  to  the  conduct  of  Intelligence 
operations  are  relevant  to  this  issue  of  na¬ 
tional  security  interests  and  must  be  safe¬ 
guarded.  Further,  the  disclosure  of  unclassi¬ 
fied  data  within  this  record  system  is  exempt 
only  to  the  extent  that  the  disclosure  of  such 
material  would  reveal  the  identity  of  a  source 
who  furnished  information  to  the  Govern¬ 
ment  under  an  express  promise  that  the 
identity  of  the  source  would  be  held  in  con¬ 
fidence,  or,  prior  to  the  effective  date  of  Sec¬ 
tion  3,  Title  5  USC  552a,  under  an  implied 
promise  that  the  identity  of  the  source  would 
be  held  in  confidence.  These  assurances  are 
essential  to  the  frank  and  candid  disclosure 
of  Information  which  is  essential  to  the  pur¬ 
poses  of  these  investigations.  Confidence  in 
the  integrity  of  the  Government’s  assurances 
must  be  maintained  or  the  investigative 
process  will  be  severely  damaged. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0502.1 1USAREUR. 

SYSNAME — File  Search  Microfilm  Storage 
and  Retrieval  System 

EXEMPTION — This  system  of  records  is  ex¬ 
empt  from  the  following  provisions  of  Title 
5,  United.  States  Code.  Section  552a:  (c)(3), 
(d),  (e)(4)(G).  (e)(4)(H),  (e)(4)  (I),  and 
(*). 

AUTHORITY— 5  USC  552a(k)  (1)  and  (5). 

REASONS — Executive  Order  11652  provides 
for  the  protection  of  official  information  and 
material  which,  because  it  bears  directly  on 
the  effectiveness  of  our  national  defense  and 
the  conduct  of  our  foreign  relations,  must 
be  limited  in  its  accessibility.  To  protect 
against  hostile  actions,  both  overt  and  covert, 
it  is  essential  that  such  official  Information 
and  material  be  given  only  limited  dissem¬ 
ination.  Additionally,  the  following  factors 
are  at  issue  in  disclosure  of  data  from  this 
system  of  records:  release  of  exempted  in¬ 
formation  would  endanger  the  safety  of 
sources  involved  in  intelligence  programs; 
release  would  invade  the  privacy  of  those 
Individuals  Involved  in  intelligence  pro¬ 
grams;  release  would  compromise  and  thus 
negate  specialized  techniques  used  to  sup¬ 
port  intelligence  programs;  and  release  would 
interfere  with  and  negate  the  orderly  con¬ 
duct  of  intelligence  operations. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0503.04  USASA. 

SYSNAME — Security  Clearance  Case  Files 
(SCCF) . 

EXEMPTION — This  system  of  records  is 
exempffrom  the  following  provisions  of  Title 
5,  United  States  Code,  section  552a:  subsec¬ 
tion  (d). 

AUTHORITY— 5  USC  552a(k)  (5) . 

REASONS — SCCF  may  contain  copies  of  in¬ 
vestigatory  material  furnished  to  those  or¬ 
ganizations  with  investigative  charter 
(USAINTA,  DIS,  CIDC)  under  an  implied 
promise  of  confidentiality.  Record  copies  of 
this  investigatory  material  are  maintained 
under  Jurisdiction  of  the  respective  investi¬ 
gative  organizations,  with  USASA  a  consumer 
of  the  investigative  product.  Copies  are  main¬ 
tained  by  USASA  only  for  purpose  of  con¬ 
tinuous  security  cognizance  required  by  Di¬ 
rector  of  Central  Intelligence  Directive  No. 
1/14.  Material  compiled  in  USASA  Command 
channels  from  sources  given  similar  implied 
assurances  of  confidentiality  would  require 
same  exemption. 


Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0503 .06D  AMI. 

SYSNAME — Counterintelligence  Operations 
Files. 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  Section  552a:  subsec¬ 
tions  3(c)  (3) ;  (d);  (e)(1);  (e)(4)  (G),  (H) 
and  (I) ;  and  (f). 

AUTHORITY— 5  USC  552a(k)  (1),  (2)  and 
(5). 

REASONS — a.  These  files  concern  matters 
of  significant  consequence  to  national  se¬ 
curity,  such  as  counterespionage  operations 
conducted  by  or  in  conjunction  with  the 
Army. 

b.  Contain  classified  information  author¬ 
ized  under  Executive  Order  11652  to  be  kept 
secret  in  the  interest  of  national  defense. 

c.  Potential  for  damage  to  US  foreign  pol¬ 
icy  or  US  relationships  with  friendly  coun¬ 
tries  could  arise  from  disclosure  of  informa¬ 
tion  included  in  the  file. 

d.  Disclosure  of  material  would  reveal  the 
identity  of  a  source  who  furnished  informa¬ 
tion  to  the  government  under  promise  that 
identity  of  source  and  information  provided 
would  be  held  in  confidence. 

e.  Material  was  compiled  for  purpose  of  de¬ 
termining  suitability,  eligibility  or  quali¬ 
fications  for  access  or  continued  access  to 
classified  information. 

f.  Intelligence  information  in  the  records 
originated  with  CIA,  whose  records  are  ex¬ 
empted  by  the  Privacy  Act  of  1974,  friendly 
foreign  countries  that  have  classified  the  in¬ 
formation;  FBI  and  other  agencies. 

g.  The  files  contain  information  which  re¬ 
veals  sensitive  means  and  methods  em¬ 
ployed  by  US  intelligence  agencies  to  coun¬ 
ter  activities  of  hostile  intelligence  services. 
These  methods  and  sensitive  means  can  be 
identified  by  disclosure  of  the  information. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0506.01DAMI. 

SYSNAME — Security  Access  Information 
Files. 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of 
Title  5,  United  States  Code,  Section  552a: 
3  (d)  and  (e)(4)  (H)  and  (I). 

AUTHORITY— 5  USC  552a (k)  (1),  (2)  and 
(5). 

REASONS — Material  contained  in  this  rec¬ 
ord  system  which  is  properly  and  currently 
classified  under  the  provisions  of  Executive 
Order  11652  includes  data  concerning  sen¬ 
sitive  sources  and  operational  methods 
whose  dissemination  must  be  strictly  con¬ 
trolled  because  of  its  relationship  to  national 
security  intelligence  considerations.  Addi¬ 
tionally,  in  the  conduct  of  operations  which 
produce  these  records,  at  times  the  methods 
and  arrangements  with  our  Allies  pertinent 
to  the  conduct  of  intelligence  operations 
are  relevant  to  this  issue  of  national  secu¬ 
rity  Interests  and  must  be  safeguarded. 
Further,  the  disclosure  of  unclassified  data 
within  this  record  system  is  exempt  only 
to  the  extent  that  the  disclosure  of  such 
material  would  reveal  the  identity  of  a 
source  who  furnished  information  to  the 
Government  under  an  express  promise  that 
the  Identity  of  the  source  would  be  held  in 
confidence,  or,  prior  to  the  effective  date 
of  Section  3,  Title  5  USC  552a,  under  an  im¬ 
plied  promise  that  the  identity  of  the  source 
would  be  held  in  confidence.  These  assur¬ 
ances  are  essential  to  the  purposes  of  these 
investigations.  Confidence  in  the  integrity 
of  the  Government's  assurances  must  be 
maintained  or  the  investigative  process  will 
be  severely  damaged. 
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Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0508.07  US  A  Cl  DC. 

SYSNAME — Criminal  Investigation  Ac¬ 
creditation  Files. 

EXEMPTION — This  system  of  records  Is 
exempted  from  the  following  provisions  of 
Title  5,  United.  States  Code,  Section  552a: 

(d) ,  (e)(1).  (f)(2).  (f)(3),  (f)(4),  and  (f) 
(5). 

AUTHORITY— 5  USC  652a(k)  (2),  (5), 

(7). 

REASONS — The  US  Army  Criminal  Investi¬ 
gation  Command  (USACIDC)  Is  a  criminal 
law  enforcement  component,  and  the  Intelli¬ 
gent  selection  of  personnel  for  those  special 
duties  requires  a  detailed  and  candidly 
truthful  dossier  of  background  Information, 
sometimes  necessitating  an  express  or  Im¬ 
plied  promise  of  confidentiality  to  those  In¬ 
formation  sources.  Disclosure  of  portions  of 
this  accreditation  information  to  the  individ¬ 
ual  could  result  In  the  elimination  of  crucial 
sources  of  information,  concealment  of  per¬ 
tinent  Information,  and  possible  breeches  of 
confidence;  and  thereby  jeopardize  the  basic 
standards  required  of  USACIDC  personnel. 

The  exemption  of  the  individual’s  right  of 
access  to  his  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  other 
cited  provisions. 

Maintaining  Information  which  Is  strictly 
relevant  to  the  accreditation  or  criminal  law 
enforcement  function  may  well  exclude  col¬ 
lations  of  segments  of  seemingly  nonrelevant 
Information  which  will  produce  a  significant 
Impact  upon  the  qualifications  and  suita¬ 
bility  of  an  Individual  for  USACIDC  duties. 

Exempted  Record  Systems 
(General  Exemptions) 

ID — A0508.09DAPE. 

SYSNAME — FBI  Criminal-Type  Reporting 
Files. 

EXEMPTION — This  system  of  records  Is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section  552a: 
(c)(3).  (c)(4),  (d).  (e)(2),  (e)(3),  (e)(4) 
(O).  (e)(4)(H),  (e)(4)  (I),  (e)(5),  (e)(8). 
(f),  and  (g). 

AUTHORITY— 6  UJ3.C.  562a(J)  (2). 

REASONS — Granting  individuals  access  to 
Information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  Interfere  with  orderly 
Investigations  and  with  the  orderly  admin¬ 
istration  of  Justice.  Disclosure  of  this  In¬ 
formation  could  result  in  the  concealment 
of  evidence  and  jeopardize  the  safety  and 
well  being  of  Informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  Information 
could  also  reveal  and  render  Ineffectual  In¬ 
vestigative  techniques,  sources,  and  methods 
used  by  this  component  and  could  result  in 
the  Invasion  of  the  privacy  of  Individuals 
only  incidentally  related  to  an  Investigation. 

The  exemption  of  the  Individual’s  right  of 
access  to  his  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  the 
other  cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID— A0508.ll  USACIDIC. 

SYSNAME — Criminal  Investigation  Case 
Files,  Crime  Laboratory  Reporting  Flies,  and 
indices  thereto. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  Section  552a: 
(c)(3),  (c)(4),  (d).  (e)(1),  (e)(2),  (e)(3), 

(e) (4)(G),  (e)(4)(H).  (e)(4)  (I),  (e)(8), 
(e)  (8),  (f),  (g),  and  (o). 


AUTHORITY— 5  U.S.C.  552a(j)(2). 

REASONS — Granting  Individuals  access  to 
Information  collected  and  maintained  by 
this  component  relating  to  the  enforcement 
of  criminal  laws  could  Interfere  with  orderly 
Investigations  and  with  the  orderly  admin¬ 
istration  of  Justice.  Disclosure  of  this  In¬ 
formation  could  result  In  the  concealment  of 
evidence  and  jeopardize  the  safety  and  well 
being  of  Informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  information 
could  also  reveal  and  render  Ineffectual  in¬ 
vestigative  techniques,  sources  and  methods 
used  by  this  component  and  could  result  In 
the  Invasion  of  privacy  of  individuals  only 
Incidentally  related  to  an  investigation. 

The  exemption  of  the  Individual’s  right  of 
access  to  his  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  other 
cited  provisions. 

Because  of  the  nature  of  the  criminal  law 
enforcement  function  and  the  extreme  dif¬ 
ficulty  In  circumscribing  criminally  relevant 
Information,  the  requirement  to  maintain 
information  which  Is  strictly  relevant  to 
this  function  could  prevent  the  complete 
and  timely  Investigation  of  criminal  offenses 
which  are  Initiated  by  or  Involve  theoreti¬ 
cally  nonrelevant  information. 

The  requirement  to  report  new  systems  of 
records  to  Congress  would  potentially  entail 
substantial  delay  and  premature  disclosure, 
and  could  unduly  Impede  the  timely  and 
effective  utilization  of  new  methods  or  pro¬ 
cedures  which  facilitate  the  enforcement  of 
criminal  laws. 

Exempted  Record  Systems 
(General  Exemptions) 

ID — A0508 . 1 6D  APE . 

SYSNAME — Absentee  Case  Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4).  (d),  (e)(2),  (e)(3),  (e)(4) 
(G),  (e)(4)(H),  (e) (4)  (I),  (e)(5),  (e)(8), 

(f) ,  and  (g). 

AUTHORITY — 5  Ufi.C.  552a(J)  (2). 

REASONS — Granting  Individuals  access  to 
Information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  Interfere  with  orderly 
Investigations  and  with  the  orderly  admin¬ 
istration  of  Justice.  Disclosure  of  this  in¬ 
formation  could  result  In  the  concealment 
of  evidence  and  Jeopardize  the  safety  and  well 
being  of  Informants,  witnesses  and  their 
families,  and  law  enforcement  personnel 
and  their  families.  Disclosure  of  this  In¬ 
formation  could  also  reveal  and  render  In¬ 
effectual  Investigative  techniques,  sources 
and  methods  used  by  this  component  and 
could  result  In  the  Invasion  of  the  privacy 
of  Individuals  only  Incidentally  related  to 
an  investigation. 

The  exemption  of  the  individual’s  right  of 
access  to  his  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  sys¬ 
tem  of  records  from  the  requirements  of  the 
other  cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID— A0608 . 1 7D  APE. 

SYSNAME— MP  Reporting  Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4).  (d),  (e)(2),  (e)(3),  (e)(4) 
(G).  (e)(4)(H),  (e)(4)  (I),  (e)(5),  (e)(8), 
(f) ,  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)  (2). 

REASONS — Granting  Individuals  access  to 
Information  collected  and  maintained  by 
this  component  relating  to  the  enforcement 


of  criminal  laws  could  Interfere  with  orderly 
Investigations  and  with  the  orderly  adminis¬ 
tration  of  justice.  Disclosure  of  this  Infor¬ 
mation  could  result  In  the  concealment,  al¬ 
teration  or  destruction  of  evidence  and  jeop¬ 
ardize  the  safety  and  well-being  of  Inform¬ 
ants,  witnesses  and  their  families,  and  law 
enforcement  personnel  and  their  families. 
Disclosure  of  this  information  co\ild  also  re¬ 
veal  and  render  ineffectual  investigative 
techniques,  sources  and  methods  used  by  this 
component  and  could  result  in  the  invasion 
of  the  privacy  of  individuals  only  inciden¬ 
tally  related  to  an  investigation. 

The  exemption  of  the  Individual's  right  of 
access  to  his  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  the  other 
cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID — A0508.24DAPE. 

SYSNAME — Serious  Incident  Reporting 
Files. 

EXEMPTION — This  system  of  records  Is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4),  (d).  (e)(2),  (e)(3),  (e)(4) 
(G),  (e)(4)(H),  (e)  (4)  (I),  (e)(5),  (e)(8), 
(f) ,  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)  (2). 

REASONS — Granting  Individuals  access  to 
Information  collected  and  maintained  by 
this  component  relating  to  the  enforcement 
of  criminal  laws  could  Interfere  with  or¬ 
derly  Investigations  and  with  the  orderly 
administration  of  Justice.  Disclosure  of  this 
Information  could  result  In  the  concealment 
of  evidence  and  jeopardize  the  safety  and 
well  being  of  Informants,  witnesses  and  their 
families,  and  law  enforcement  personnel 
and  their  families.  Disclosure  of  this  infor¬ 
mation  could  also  reveal  and  render  Ineffec¬ 
tual  Investigative  techniques,  sources  and 
methods  used  by  this  component  and  could 
result  In  the  Invasion  of  the  privacy  of 
individuals  only  Incidentally  related  to  an 
Investigation. 

The  exemption  of  the  Individual’s  right 
of  access  to  his  records  and  the  reasons 
therefor  necessitate  the  exemption  of  this 
system  of  records  from  the  requirements  of 
the  other  cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID— A0509 .03DAPE . 

SYSNAME — Trophy  Firearm  Registration. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4),  (d).  (e)(2),  (e)(3),  (e)(4) 
(O),  (e)(4)(H),  (e)(4)  (I),  (e)(5),  (e)(8), 
(f) ,  and  (g). 

AUTHORITY— 5  U.S.C.  552a(j)  (2) . 

REASONS — Granting  Individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly 
investigations  and  with  the  orderly  ad¬ 
ministration  of  justice.  Disclosure  of  this 
Information  could  result  In  the  concealment 
of  evidence  and  Jeopardize  the  safety  and 
well  being  of  Informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  information 
could  also  reveal  and  render  Ineffectual  In¬ 
vestigative  techniques,  sources  and  methods 
used  by  this  component  and  could  result  In 
the  Invasion  of  the  privacy  of  Individuals 
only  Incidentally  related  to  an  Investigation. 

The  exemption  of  the  Individual’s  right  of 
access  to  hl3  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  the 
other  cited  provisions. 


FEDERAL  REGISTER,  VOL.  40,  NO.  166— TUESDAY,  AUGUST  26,  1975 


37566 


PROPOSED  RULES 


Exempted  Record  Systems 
(General  Exemptions) 

ID— A0509 .08DAPE. 

SYSNAME — Registration  and  Permit  Plies. 

EXEMPTION — This  system  of  records  Is  ex¬ 
empted  from  the  following  provisions  of  Title 
5,  United  States  Code,  section  552a:  (c)(3), 
(c)(4),  (d).  (e)(2),  (e)(3),  (e)(4)(G), 

(e) (4)(H),  (e)(4)  (I),  (e)(5).  (e)(8),  (f), 
and  (g). 

AUTHORITY— 5  U.S.C.  652a(J)  (2) . 

REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by 
this  component  relating  to  the  enforcement 
of  criminal  laws  could  interfere  with  orderly 
investigations  and  with  the  orderly  adminis¬ 
tration  of  Justice.  Disclosure  of  this  Informa¬ 
tion  could  result  In  the  concealment,  altera¬ 
tion  or  destruction  of  evidence  and  jeopardize 
the  safety  and  well-being  of  Informants,  wit¬ 
nesses  and  their  families,  and  law  enforce¬ 
ment  personnel  and  their  families.  Dslclosure 
of  this  Information  could  also  reveal  and 
render  Ineffectual  Investigative  techniques, 
sources  and  methods  used  by  this  component 
and  could  result  In  the  invasion  of  the 
privacy  of  individuals  only  Incidentally  re¬ 
lated  to  an  investigation. 

The  exemption  of  the  Individual’s  right  of 
access  to  his  records  and  the  reasons  there-- 
for  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  the  other 
cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID— A0509.09DAPE. 

SYSNAME — Traffc  Law  Enforcement  Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4),  (d),  (e)(2),  (e)(3),  (e)(4) 
(G).  (e)(4)(H),  (e)(4)  (I),  (e)(5).  (e)(8). 

(f) ,  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)(2). 

REASONS — Granting  Individuals  access  to 
all  information  collected  and  maintained  by 
this  component  relating  to  traffic  law  en¬ 
forcement  could  Interfere  with  the  orderly 
administration  of  Justice.  Disclosure  of  cer¬ 
tain  portions  of  this  Information,  which  will 
vary  from  case  to  case,  could  result  in  the 
concealment,  alteration  or  destruction  of 
evidence  and  Jeopardize  the  safety  and  well¬ 
being  of  informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  certain  Informa¬ 
tion,  again  varying  from  case  to  case,  could 
reveal  and  render  ineffectual  investigative 
techniques,  sources  and  methods  used  by  this 
component  and  could  result  in  the  invasion 
of  privacy  of  individuals  only  incidentally 
related  to  an  Investigation. 

The  exemption  of  the  individual's  right  of 
access  to  his  entire  record  and  the  reasons 
therefor  necessitate  the  exemption  of  this 
system  of  records  from  the  requirements  of 
the  other  cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID — A0509.18DAPE. 

SYSNAME — Expelled  or  Barred  Person 
Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4),  (d),  (e)(2),  (e)(3),  (e)(4) 
(G),  (e)(4)(H),  (e)(4) (I),  (e)(5),  (e)(8). 
(f),  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)  (2) . 

REASONS — Granting  individuals  access  to 
Information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly  in¬ 
vestigations  and  with  the  orderly  adminis¬ 
tration  of  Justice.  Disclosure  of  this  informa¬ 
tion  could  result  in  the  concealment,  altera¬ 
tion  or  destruction  of  evidence  and  Jeopard¬ 
ize  the  safety  and  well-being  of  Informants, 


witnesses  and  their  families,  and  law  en¬ 
forcement  personnel  and  their  families.  Dis¬ 
closure  of  this  information  could  also  reveal 
and  render  ineffectual  investigative  tech¬ 
niques,  sources  and  methods  used  by  this 
component  and  could  result  In  the  Invasion 
of  the  privacy  of  Individuals  only  Incidentally 
related  to  an  investigation. 

The  exemption  of  the  individual’s  right 
of  access  to  his  records  and  the  reasons 
therefor  necessitate  the  exemption  of  this 
system  of  records  from  the  requirements  of 
the  other  cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID—  A0509 . 1 9D  APE. 

SYSNAME — Military  Police  Investigator 
Certification  Files. 

EXEMPTION — This  system  of  records  Is 
exempted  from  the  following  provisions  of 
Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4),  (d),  (e)(2),  (e)(3),  (e)(4) 
(G),  (e)(4)(H),  (e)(4)  (I),  (e)(5),  (e)(8), 
(f) ,  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)  (2) . 

REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  Military  Police  Investi¬ 
gator  Certification  files  could  Interfere  with 
orderly  determination  of  suitability  for 
investigator  positions.  Release  of  this  infor¬ 
mation  would  result  In  disclosure  of  informa¬ 
tion  which  has  been  extracted/duplicated 
from  record  systems  maintained  by  other 
agencies.  Disclosure  of  this  information  could 
Jeopardize  the  safety  and  well-being  of 
informants,  witnesses  and  their  families,  and 
law  enforcement  personnel  and  their  families. 
Disclosure  of  this  information  could  also 
reveal  and  render  Ineffectual  Investigative 
techniques,  sources  and  methods  used  by  this 
component  and  could  result  inthe  Invasion 
of  the  privacy  of  individuals  only  Incidentally 
related  to  an  investigation. 

The  exemption  of  the  lndiviual’s  right  of 
access  to  his  records  and  the  reasons  therefor 
necessitate  the  exemption  of  this  system  of 
records  from  the  requirements  of  the  other 
cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID— A0509.21DAPE. 

SYSNAME — Local  Criminal  Information 
Files. 

EXEMPTION — This  system  of  records  is  ex¬ 
empted  from  the  following  provisions  of 
Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4),  (d),  (e)(2),  (e)(3),  (e)(4) 
(G),  (e)(4)(H),  (e)(4)  (I),  (e)(5),  (e)(8), 
(f),  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)(2). 

REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly  In¬ 
vestigations  and  with  the  orderly  adminis¬ 
tration  of  Justice.  Disclosure  of  this  Informa¬ 
tion  could  result  in  the  concealment,  altera¬ 
tion  or  destruction  of  evidence  and  jeopard¬ 
ize  the  safety  and  well-being  of  informants, 
witnesses  and  their  families,  and  law  enforce¬ 
ment  personnel  and  their  families.  Disclosure 
of  this  information  could  also  reveal  and  ren¬ 
der  Ineffectual  investigative  techniques, 
sources  and  methods  used  by  this  compo¬ 
nent  and  could  result  in  the  invasion  of  the 
privacy  of  individuals  only  incidentally  re¬ 
lated  to  an  investigation. 

The  exemption  of  the  individual’s  right 
of  access  to  his  records  and  the  reasons 
therefor  necessitate  the  exemption  of  this 
system  of  records  from  the  requirements  of 
the  other  cited  provisions. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0607 .0 1 D  AIG. 

SYSNAME — Accident  and  Incident  Flies. 

EXEMPTION — This  system  Is  exempt  from 
the  following  provisions  of  Title  5,  United 


States  Code,  Section  562a:  (c)(3)  and  (d). 

AUTHORITY— 5  U.S.C.  552a(k)  (4)  and 
(5). 

REASONS — Army  Aircraft  Investigation 
Reports  are  used  only  to  generate  aggregate 
data  for  statistical  research  and  reporting 
and  similarly  evaluative  analytic  purposes. 
The  reports  are  not  used  in  making  any 
decision  on  the  rights,  benefits,  or  privileges 
of  Individuals  and  such  uses  are  specifically 
prohibited  by  Army  regulation  (paragraph 
7-3,  AR  95-5).  Data  from  the  reports  are 
used  to  determine  suitability  for  perform¬ 
ance  of  the  assigned  duty  as  an  Instructor 
pilot. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID— A0709 .0 1 aD  APE. 

SYSNAME — United  States  Military  Acad¬ 
emy  Candidate  Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
Title  5,  United  States  Code,  section  552a: 
(d). 

AUTHORITY— 5  U.S.C.  552a(k)  (5)  and 

(7). 

REASONS — It  Is  imperative  that  the  con¬ 
fidential  nature  of  evaluation  and  investi¬ 
gatory  material  on  candidates,  cadets,  and 
graduates,  furnished  to  the  United  States 
Military  Academy  under  an  express  promise 
of  confidentiality,  be  maintained  to  insure 
the  candid  presentation  of  information  nec¬ 
essary  in  determinations  involving  admission 
to  the  Military  Academy,  and  suitability  for 
commissioned  service  and  future  promotion. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0709.03aDAPE. 

SYSNAME— United  States  Military  Acad¬ 
emy  Cadet  Flies. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
Title  5,  United  States  Code,  section  552a:  (d) . 

AUTHORITY— 5  U.S.C.  562a(k)  (5)  and  (7) . 

REASONS — It  is  imperative  that  the  con¬ 
fidential  nature  of  evaluation  and  investi¬ 
gatory  material  on  candidates,  cadets,  and 
graduates,  furnished  to  the  United  States 
Military  Academy  under  an  express  promise 
of  confidentiality,  be  maintained  to  insure 
the  candid  presentation  of  information  nec¬ 
essary  in  determinations  involving  admission 
to  the  Military  Academy,  and  suitability  for 
commissioned  service  and  future  promotion. 

Exempted  Record  Systems 
(General  Exemptions) . 

ID — A0720.04(a)  DAPE. 

SYSNAME — Individual  Correctional  Treat¬ 
ment  Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4).  (d),  (e)(2),  (e)(3),  (e)(4) 
(G),  (e)(4)(H),  (e)  (4)  (I) ,  (e)(5),  (e)(8). 
(f) ,  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)  (2). 

REASONS — Granting  individuals  access 
to  information  collected  and  maintained  by 
this  component  relating  to  the  enforcement 
of  criminal  laws  could  interfere  with  the 
orderly  administration  of  Justice.  Disclosure 
of  this  Information  could  jeopardize  the  safe¬ 
ty  and  well-being  of  information  sources, 
correctional  supervisors  and  other  confine¬ 
ment  facility  administrators.  Disclosure  of 
the  Information  could  also  result  in  the  in¬ 
vasion  of  privacy  of  persons  who  provide  In¬ 
formation  used  in  developing  individual  cor¬ 
rectional  treatment  programs.  Further,  dis¬ 
closure  could  result  In  a  deterioration  of  a 
prisoner’s  self-image  and  adversely  affect 
meaningful  relationships  between  a  prisoner 
and  his  counselor  or  supervisor.  Both  these 
factors  are  essential  to  the  rehabilitative 
process. 

The  exemption  of  the  Individual’s  right  of 
access  to  his  records  and  the  reasons  there¬ 
for  necessitate  the  exemption  of  this  system 


of  records  from  the  requirements  of  the 
other  cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID — A0720.04(b)  DAPE. 

SYSNAME — Individual  Correctional  Treat¬ 
ment  Files  (US  Army  Retraining  Brigade). 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section 
552a:  (c)(3),  (c)(4),  (d),  (e)(2),  (e)(3). 
(e)(4)(G),  (e)(4)(H),  (e) (4) (I) .  (e)(5), 
(e)(8),  (f),  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)  (2). 
REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  the  or¬ 
derly  administration  of  Justice.  Disclosure  of 
this  information  could  Jeopardize  the  safety 
and  well-being  of  information  sources,  cor¬ 
rectional  supervisors  and  other  confinement 
facility  administrators.  Disclosure  of  the  in¬ 
formation  could  also  result  in  the  invasion  of 
privacy  of  persons  who  provide  information 
used  in  developing  individual  correctional 
treatment  programs.  Further,  disclosure 
could  result  in  a  deterioration  of  a  prisoner’s 
self-image  and  adversely  affect  meaningful 
relationships  between  a  prisoner  and  his 
counselor  or  supervisor.  Both  these  factors 
are  essential  to  the  rehabilitative  process. 

The  exemption  of  the  individual’s  right  of 
access  to  his  records  and  the  reasons  therefor 
necessitate  the  exemption  of  this  system  of 
records  from  the  requirements  of  the  other 
cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

ID — A0721.11DAPE. 

SYSNAME — Individual  Correctional  Treat¬ 
ment  Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions 
of  the  Title  5,  United  States  Code,  section 
552a:  (c)(3),  (c)(4).  (d),  (e)(2),  (e)(3), 

(e)  (4) (G).  (e) (4) (H),  (e) (4) (I). (e) (5),  (e) 
(8),  (f ) ,  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)(2). 
REASONS — Granting  Individuals  access  to 
Information  collected  and  maintained  by 
this  component  relating  to  the  enforcement 
of  criminal  laws  could  interfere  with  the 
orderly  administration  of  Justice.  Disclosure 
of  this  information  could  Jeopardize  the 
safety  and  well-being  of  information  sources, 
correctional  supervisors  and  other  confine¬ 
ment  facility  administrators.  Disclosure  of 
the  Information  could  also  result  in  the  in¬ 
vasion  of  privacy  of  persons  who  provide  in¬ 
formation  used  in  developing  individual  cor¬ 
rectional  treatment  programs.  Further,  dis¬ 
closure  could  result  in  a  deterioration  of  a 
prisoner’s  self-image  and  adversely  affect 
meaningful  relationships  between  a  prisoner 
and  his  counselor  or  supervisor.  Both  these 
factors  are  essential  to  the  rehabilitative 
process. 

The  exemption  of  the  individual’s  right  of 
access  to  his  records  and  the  reasons  therefor 
necessitate  the  exemption  of  this  system  of 
records  from  the  requirements  of  the  other 
cited  provisions. 

Exempted  Record  Systems 
(General  Exemptions) 

^D— A0721.12DAPE. 

SYSNAME — Individual  Prisoner  Personnel 
Files. 

EXEMPTION — This  system  of  records  is 
exempted  from  the  following  provisions  of 
the  Title  5,  United  States  Code,  section  552a: 
(c)(3),  (c)(4),  (d),  (e)(2),  (e)(3),  (e)(4) 
(G)  (e)(4)(H),  (e)(4) (I),  (e)(5),  (e)(8), 

(f) ,  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)  (2) . 
REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
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criminal  laws  could  interfere  with  the  orderly 
administration  of  Justice.  Disclosure  of  this 
information  could  Jeopardize  the  safety  and 
well-being  of  Information  sources,  correc¬ 
tional  supervisors  and  other  confinement  fa¬ 
cility  administrators.  Disclosure  of  the  in¬ 
formation  could  also  result  in  the  invasion  of 
privacy  of  persons  who  provide  information 
used  in  developing  individual  correctional 
treatment  programs.  Further,  disclosure 
could  result  in  a  deterioration  of  a  prisoner’s 
self-image  and  adversely  affect  meaningful 
relationships  between  a  prisoner  and  his 
counselor  or  supervisor.  Both  these  factors 
are  essential  to  the  rehabilitative  process. 

The  exemption  of  the  individual's  right  of 
access  to  his  records  and  the  reasons  therefor 
necessitate  the  exemption  of  this  system  of 
records  from  the  requirements  of  the  other 
cited  provisions. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0726.24DAAG. 

SYSNAME — Casualty  Case  Files. 

EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of 
Title  5,  United  States  Code  section  552a: 
(c)(3),  (d).  (e)(1),  (e)(4)(G),  (e)(4)(H), 
(e)(4)  (I),  (f). 

AUTHORITY— 5  U.S.C.  552a(k)(l). 

REASONS — Granting  access  to  the  infor¬ 
mation  contained  in  these  files  may  result  in 
their  disclosure  to  unauthorized  personnel 
and  may  be  a  detriment  to  the  Government’s 
efforts  to  obtain  a  complete  accounting  for 
the  service  members  listed  as  PW/MIA  in 
Southeast  Asia.  Also,  certain  information 
contained  in  the  files  is  not  factual  or  may 
only  allege  to  pertain  to  the  service  mem¬ 
ber.  However,  if  requested  by  the  service 
member,  the  service  member’s  primary  next 
of  kin  or  secondary  next  of  kin  (PNOK/ 
SNOK);  or  the  service  member’s  legal  rep¬ 
resentative,  the  following  procedures  will  be 
followed : 

(a)  The  files,  if  possible,  will  be  declass¬ 
ified  and  released. 

(b)  The  files  which  for  security  reasons 
cannot  be  declassified  will  be  screened  to 
develop  an  unclassified  version  of  the  file  for 
release. 

(c)  Those  files  which  contain  information 
or  which  allege  facts  about  a  service  member 
or  which  may  be  linked  to  one  or  more  per¬ 
sons,  as  Judged  by  Intelligence  experts,  may 
be  released  after  complying  with  procedures 
(a)  and  (b)  above,  and  then  only  with  the 
approval  of  the  Director,  Army  Casualty  and 
Memorial  Affairs,  or  upon  appeal  by  The  Ad¬ 
jutant  General  of  the  Army. 

In  the  interest  of  national  security  and 
the  PW/MIA’s  and  their  families,  every  ef¬ 
fort  will  be  made  to  assure  full  disclosure  of 
the  requested  information. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A0727.050SA. 

SYSNAME — Army  Council  of  Review 
Boards  Files. 

EXEMPTION — Selected  portions  of  this 
system  of  records  are  exempted  from  the 
following  provisions  of  Title  5,  United  States 
Code,  Section  552a:  (c)(3),  (d),  (e)(1),  (e) 
(4)(G),  (e)(4)(H),  (e)(4)  (I),  and  (f). 

AUTHORITY— 5  U.S.C.  552a  (k)(l). 

REASONS — Those  portions  of  Army  Se¬ 
curity  Review  Board  records  which  are  prop¬ 
erly  and  currently  classified  under  Executive 
Order  11652  are  exempted  for  reasons  of  na¬ 
tional  security. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID-A1015.06DAAG. 

SYSNAME — School  Employee  File. 

EXEMPTION — Evaluations  of  supervisors 
or  dependents  school  supervisory  officials  en¬ 
tered  in  the  file  prior  to  27  September  1975 
are  exempt  from  the  provisions  of  Title  5, 
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United  States  Code,  section  552a,  and  may 
not  be  released. 

AUTHORITY— 5  U.S.C.  552a,  subsection 
(k)<5). 

REASONS — Evaluations  of  supervisors  or 
dependents  school  supervisory  officials  en¬ 
tered  in  the  file  prior  to  27  September  1975 
were  obtained  with  an  implied  promise  of 
confidentiality  and  therefore  may  not  be 
released  to  the  individual  concerned. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A1522.10DAEN. 

SYSNAME! — Reservoir  Permit  Files. 
EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  section  552a:  (d)  and 
(f). 

AUTHORITY— 5  U.S.C.  552a(k)  (2) . 
REASONS — Subsection  (k)(2),  “Investiga¬ 
tory  material  compiled  for  law  enforcement 
purposes,  other  than  material  within  the 
scope  of  subsection  (J)  (2)  of  this  section,” 
allows  agency  heads  to  exempt  a  system  of 
records  compiled  in  the  course  of  investiga¬ 
tion  of  an  alleged  or  suspected  violation  of 
civil  or  criminal  laws. 

Some  reservoir  permit  files  contain  prede- 
cisional  information  pertinent  to  the  deter¬ 
mination  of  the  legality  of  permit  actions 
under  criminal  law.  This  is  especially  true 
where  a  permit  has  been  issued  for  specific 
work  on  Federal  property  and  the  permittee 
violates  the  stipulations  of  the  permit.  The 
permit  file  would  then  become  an  instru¬ 
ment  in  the  legal  action.  For  this  reason, 
subsection  (d)  "Access  to  Records”  is  claimed 
for  exemption. 

Exempted  Record  Systems 
(Specific  Exemptions) 

ID — A1522.15DAEN. 

SYSNAME— General  Permit  Files. 
EXEMPTION — This  system  of  records  is 
exempt  from  the  following  provisions  of  Title 
5,  United  States  Code,  section  552a:  (d)  and 
(f). 

AUTHORITY— 5  U.S.C.  552a(k)(l)  and 

(2). 

REASONS — a.  Subsection  (k)(I),  “Sub¬ 
ject  to  the  provisions  of  section  552(b)  (1)  of 
this  title,”  permits  agency  heads  to  exempt 
from  certain  provisions  of  the  act,  those  sys¬ 
tems  of  records  which  are  “(A)  specifically 
authorized  under  criteria  established  under 
an  Executive  Order  to  be  kept  Secret  in  the 
interest  of  national  defense  or  foreign  pol¬ 
icy  and  (B)  are  in  fact  property  classified 
pursuant  to  such  Executive  Order."  (See 
Working  Draft — Privacy  Act  Guidelines— 
March  7,  1975,  page  90,  Exemptions  for  Clas¬ 
sified  Material). 

In  some  cases,  General  Permits  have  been 
assigned  “ Secret ”  classification,  when  the 
permit  action  involved  other  DOD  agencies 
who  had  assigned  it  that  classification.  In 
such  cases,  exemption  of  subsection  (d), 
“Access  to  Records,”  is  claimed. 

b.  Subsection  (k)(2),  “Investigatory  ma¬ 
terial  compiled  for  law  enforcement  purposes, 
other  than  material  within  the  scope  of  sub¬ 
section  (j)  (2)  of  this  section,  ”  allows  agency 
heads  to  exempt  a  system  of  records  com¬ 
piled  in  the  course  of  investigation  of  an  al¬ 
leged  or  suspected  violation  of  civil  or  crim¬ 
inal  laws. 

Some  general  permit  files  contain  predeci- 
sional  information  pertinent  to  the  deter¬ 
mination  of  the  legality  of  permit  actions  un¬ 
der  civil  law.  This  is  especially  true  where  the 
physical  work  has  already  been  performed 
without  permit  and  legal  action  is  required. 

For  this  reason,  subsection  (d)  “Access  to 
Records”  is  claimed  for  exemption. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives,  OASD  (Comptroller) . 

August  19, 1975. 

I FR  Doc.75-22217  Filed  8-25-75;8:45  am] 
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Department  of  the  Navy 
[  32  CFR  Part  701  ] 

[SECNAVINST  5211.5] 

PERSONAL  PRIVACY  AND  RIGHTS  OF  IN¬ 
DIVIDUALS  REGARDING  THEIR  PER¬ 
SONAL  RECORDS  AND  PRIVACY  ACT 

EXEMPTIONS 

Notice  of  Proposed  Rule  Making 

In  accordance  with  the  public  rule- 
making  requirements  of  5  U.S.C.  §  552a 
(f ) ,  (j) ,  and  (k) ,  notice  is  given  that  the 
Secretary  of  the  Navy  proposes  to  estab¬ 
lish  a  Subpart  P  of  Part  701  of  32  CFR 
entitled,  “Personal  Privacy  and  Rights 
of  Individuals  Regarding  Their  Personal 
Records,”  and  a  Subpart  G  of  Part  701  of 
32  CFR  entitled,  “Privacy  Act  Exemp¬ 
tions.”  These  subparts  will  reimplement, 
within  the  Department  of  the  Navy,  the 
provisions  of  the  Privacy  Act  of  1974  (5 
U.S.C.  §  552a),  as  implemented  through¬ 
out  the  Department  of  the  Defense  by 
Department  of  Defense  Directive  5400.11, 
August  4,  1975,  Personal  Privacy  and 
Rights  of  Individuals  Regarding  Their 
Personal  Records  (proposed  32  CFR  Part 
286a  (40  FR  - )).  Subpart  F  is  pro¬ 

posed  as  the  Department  of  the  Navy 
rules  implementing  the  general  pro¬ 
visions  and  requirements  of  5  U.S.C. 
§  552a,  and  Subpart  G  is  proposed  as 
rules  under  5  U.S.C.  §  552a  (j)  and  (k) 
to  exempt  certain  systems  of  records 
within  the  Department  of  the  Navy  from 
specified  subsections  of  U.S.C.  §  652a. 

The  proposed  Subparts  F  and  G  are 
derived  from  Secretary  of  the  Navy  In¬ 
struction  5211.5,  Personal  privacy  and 
rights  of  individuals  regarding  their  per¬ 
sonal  records,  which  was  promulgated  by 
the  Secretary  of  the  Navy  on  August  14, 
1975,  for  immediate  dissemination 
throughout  the  Department  of  the  Navy, 
with  an  effective  date  of  September  27, 
1975.  This  method  of  promulgation  is  in¬ 
tended  to  satisfy  the  need  for  providing 
detailed  advance  guidance  to  naval  ac¬ 
tivities  and  officials  prior  to  Septem¬ 
ber  27,  1975,  the  effective  date  of  the  ap¬ 
plicable  provisions  of  5  U.S.C.  §  552a.  If 
warranted  in  light  of  comments  received 
in  response  to  this  notice,  appropriate 
revisions  to  Secretary  of  the  Navy  In¬ 
struction  5211.5  will  be  promulgated,  and 
such  revisions  will  be  incorporated  in 
Subparts  F  and  G  of  Part  701  of  32  CFR 
upon  adoption. 

Interested  persons  are  invited  to  par¬ 
ticipate  in  the  formulation  of  the  pro¬ 
posed  rules  by  submitting  written  data, 
views,  and  arguments  to  the  Director, 
Naval  Records  Management  Division, 
Office  of  the  Chief  of  Naval  Operations 
(Op-09B1),  Navy  Department,  Washing¬ 
ton,  D  C.  20350.  Oral  presentations  are 
not  desired.  All  written  material  received 
on  or  before  September  24,  1975,  or  re¬ 
ceived  on  or  before  the  30th  day  follow¬ 
ing  the  publication  of  this  notice  in  the 
Federal  Register,  whichever  day  is  the 
later,  will  be  considered  by  the  Secretary 
of  the  Navy  prior  to  publication  of  the 
rroposed  subparts  as  adopted  rules.  All 
comments  received  in  response  to  this 
proposal  will  be  available  for  public  in¬ 
spection  during  normal  business  hours 
at  the  Law  Library  of  the  Office  of  the 
Judge  Advocate  General,  room  2527,  Navy 
Arlington  Annex  (Federal  Office  Build¬ 


ing  No.  2) ,  Southgate  Road  and  Columbia 
Pike,  Arlington,  Virginia. 

These  rules  are  proposed  under  the  au¬ 
thority  of  the  Privacy  Act  of  1974,  Pub. 
L.  No.  93-579,  5  U.S.C.  §  552a. 

It  is  therefore  proposed  to  establish 
Subparts  F  and  G  of  Part  701  of  32  CFR, 
as  follows: 

Subpart  F — Personal  Privacy  and  Rights  of 
Individuals  Regarding  Their  Personal  Records 

Sec. 

701.100  Purpose. 

701.101  Scope  and  effect. 

701.104  Policy,  responsibilities,  and  au¬ 

thority. 

701.105  Definitions. 

701.106  Notification  and  access  procedures. 

701.107  Disclosure  to  others  and  disclosure 

accounting. 

70 1 . 1 08  Amendment  procedures. 

701.109  Collection  of  personal  Information 

from  individuals. 

701.110  Safeguarding  personal  information. 

701.111  Exemptions. 

701.113  Contractors. 

701.117  Rules  for  amendment  requests. 

701.118  Rules  of  conduct  under  Privacy  Act. 

Subpart  G — Privacy  Act  Exemptions 

701.120  Purpose. 

701.121  Exemption  for  classified  records. 

701 .122  Exemption  for  security  operations. 

701.123  Exemptions  for  specific  Navy  record 

systems. 

701.124  Exemptions  for  specific  Marine 

Corps  record  systems. 

Authority:  Pub.  L.  No.  93-579,  6  U.S.C. 
§  552a. 

Subpart  F — Personal  Property  and  Rights 
of  Individuals  Regarding  Their  Personal 
Records 

§  701.100  Purpose. 

This  subpart  implements  the  Privacy 
Act  of  1974  (5  U.S.C.  §  552a)  and  De¬ 
partment  of  Defense  Directive  5400.11, 
Personal  Privacy  and  Rights  of  Individ¬ 
uals  Regarding  Their  Personal  Records 
(DoD  Dir.  5400.11)  by  delineating  and 
prescribing  policies,  conditions,  and  pro¬ 
cedures  for: 

(a)  Notifying  an  individual  in  re¬ 
sponse  to  his  request  if  a  Department  of 
the  Navy  system  of  records  named  by 
the  individual  contains  a  record  pertain¬ 
ing  to  him. 

(b)  Verifying  the  identity  of  an  in¬ 
dividual  who  requests  his  record,  or  in¬ 
formation  pertaining  to  him  before  the 
record  or  information  is  made  available. 

(c)  Granting  access  to  an  individual 
upon  that  individual’s  request  for  his 
record  or  for  information  pertaining  to 
him. 

(d)  Reviewing  a  request  from  an  in¬ 
dividual  concerning  the  amendment  of 
any  record  or  information  pertaining  to 
the  individual,  for  making  a  determi¬ 
nation  on  the  request,  and  for  an  appeal 
of  an  initial  adverse  determination. 

(e)  Collection,  safeguarding,  mainte¬ 
nance,  public  notice,  use,  and  dissemina¬ 
tion  of  personal  information. 

(f)  Disclosing  personal  information, 
and  for  exempting  systems  of  records 
from  the  requirements  of  5  U.S.C.  §  552a. 

(g)  Establishing  rules  of  conduct  for 
the  guidance  of  Department  of  the  Navy 
personnel,  who  will  be  subject  to  criminal 
penalties  for  non-compliance  with  the 
act. 

§  701.101  Scope  and  effect. 

(a>  Applicability.  This  subpart  applies 
throughout  the  Department  of  the  Navy, 


and  to  any  contractor  maintaining  a  sys¬ 
tem  of  records  to  accomplish  a  Depart¬ 
ment  of  the  Navy  purpose.  Its  provisions 
govern  the  collection,  maintenance,  use, 
and  dissemination  of  personal  informa¬ 
tion,  and  all  requests  from  individuals 
who  seek  information  on,  access  to, 
copies  of,  or  amendment  of  records  per¬ 
taining  to  themselves,  under  the  provi¬ 
sions  of  5  U.S.C.  §  552a.  This  subpart 
does  not  apply  to: 

(1)  Requests  for  information  under 
the  Freedom  of  Information  Act  (5  U.S.C. 
§  552)  by  an  individual  about  another 
individual.  Such  third  party  requests  are 
governed  by  the  provisions  of  subparts 
A  through  D  of  this  Part  701.  (See  40 
F.R.  12776,  Mar.  21, 1975.) 

(2)  Requests  for  personal  information 
from  the  General  Accounting  Office. 
These  are  governed  by  Secretary  of  the 
Navy  Instruction  5741. 2E,  Relations  with 
the  General  Accounting  Office. 

(b)  Other  directives.  Should  any  exist¬ 
ing  directives  dealing  with  the  disclosure 
of  individual  personal  records  conflict 
with  this  subpart,  the  provisions  of  this 
subpart  shall  take  precedence. 

§  701.104  Policy,  responsibilities,  and 
authority. 

(a)  Policy  and  General  Requirements. 
(1)  Subject  to  the  conditions  and  di¬ 
rections  in  this  subpart,  it  is  the  policy 
of  the  Department  of  the  Navy  to  ensure 
that  all  personnel  at  all  echelons  of  com¬ 
mand  or  authority  within  the  depart¬ 
ment  comply  fully  with  the  purposes  and 
requirements  of  5  U.S.C.  §  552a  for  pre¬ 
serving  the  privacy  of  information  con¬ 
cerning  individuals  in  departmental 
records.  Stated  generally,  these  purposes 
and  requirements  are: 

(1)  To  permit  individuals  to  know  what 
records  pertaining  to  them  are  collected, 
maintained,  used,  or  disseminated  in  the 
department,  to  have  access  to  and  have 
copies  made  of  all  or  any  portions  of  such 
records,  and  to  obtain  amendment  of 
such  records: 

(ii)  To  permit  individuals  to  prevent 
records  pertaining  to  them  obtained  by 
the  department  for  a  particular  purpose 
from  being  used  or  made  available  for 
another  purpose  without  their  consent; 

(iii)  To  require  the  department  to  col¬ 
lect,  maintain,  use,  or  disseminate  rec¬ 
ords  of  identifiable  personal  information 
only  for  necessary  and  lawful  purposes 
and  in  a  manner  which  ensures  that  the 
information  is  current  and  accurate  for 
the  intended  uses; 

(iv)  To  ensure  that  adequate  safe¬ 
guards  are  provided  to  prevent  misuse 
of  personal  information  in  records;  and 

(v)  To  ensure  that  requests  of  in¬ 
dividuals  for  notification,  access,  or 
amendments  concerning  their  records 
are  acted  on  as  promptly  as  feasible,  even 
though  such  requests  may  be  minor  in 
nature. 

(2)  In  furtherance  of  the  above  policy, 
the  Department  of  the  Navy  will  main¬ 
tain  in  its  records  only  such  information 
about  an  individual  as  is  reasonably  nec¬ 
essary  to  accomplish  a  purpose  or  mis¬ 
sion  required  by  statute  or  executive 
order  of  the  President.  In  assessing  need, 
consideration  will  be  given  to  alterna¬ 
tives,  such  as:  use  of  information  not 
individually  identifiable;  use  of  sam¬ 
pling;  selective  collection  of  certain  data 
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for  certain  individuals,  only.  Addition¬ 
ally,  consideration  is  to  be  given  to  the 
length  of  time  information  is  needed, 
and  the  cost  of  maintaining  the  informa¬ 
tion  compared  to  the  risks  and  adverse 
consequences  of  not  maintaining  the  in¬ 
formation. 

(3)  No  system  of  records,  as  defined 
in  §  701.105(d),  shall  be  maintained 
within  the  Department  of  the  Navy, 
unless  it  has  been  described  or  included 
in  a  record  system  notice  published  in 
the  Federal  Register. 

(4)  The  Department  of  the  Navy  will 
not  maintain  any  records  describing  how 
an  individual  exercises  rights  guaran¬ 
teed  by  the  First  Amendment,  including 
religious  and  political  beliefs,  freedom 
of  speech  and  press,  and  the  right  of 
assembly  and  to  petition,  unless  they 
are  either: 

(i)  Expressly  authorized  by  statute; 

(ii)  Authorized  by  the  individual  about 
v  horn  the  record  is  maintained ; 

(iii)  Within  the  scope  of  an  authorized 
law  enforcement  activity;  or 

(iv)  Maintenance  of  certain  items  of 
information  relating  to  religious  affilia¬ 
tion  for  members  of  the  naval  service  who 
are  Chaplains.  This  should  not  be  con¬ 
strued,  however,  as  restricting  or  exclud¬ 
ing  solicitation  for  information  which 
the  individual  is  willing  to  have  in  his 
record  concerning  religious  preference, 
particularly  that  required  in  emergency 
situations. 

(5)  Records  used  by  the  Department  of 
the  Navy  in  making  determinations 
about  an  individual  will  be  maintained 
with  such  accuracy,  relevance,  timeliness, 
and  completeness  as  is  reasonably  neces¬ 
sary  to  ensure  fairness  to  the  individual 
in  any  determination  concerning  him. 

(b)  Responsibilities.  (1)  The  com¬ 
manding  officer  or  head  of  each  Depart¬ 
ment  of  the  Navy  unit  or  activity  is  re¬ 
sponsible  for  reimplementing  and  exe¬ 
cuting  the  purposes  and  requirements  of 
5  U.S.C.  §  552a  within  his  organization, 
in  accordance  with  the  provisions  of  this 
subpart. 

(2)  The  Chief  of  Naval  Operations  (Op- 
09B)  is  responsible  for  administering  and 
supervising  the  execution  of  5  U.S.C. 
§  552a  and  this  subpart  within  the  Navy. 
Additionally,  the  Chief  of  Naval  Opera¬ 
tions  (Op-09B1)  is  designated  as  the 
Principal  Privacy  Act  Coordinator  for 
the  Department  of  the  Navy. 

(3)  The  Commandant  of  the  Marine 
Corps  is  responsible  for  administering 
and  supervising  the  execution  of  5  U.S.C. 
§  552a  and  this  subpart  within  the  Ma¬ 
rine  Corps. 

(c)  Denial  authority.  Only  the  follow¬ 
ing  officials  (and  their  principal  assist¬ 
ants  authorized  to  act  “by  direction”)  are 
authorized  to  deny  requests  for  notifica¬ 
tion,  access  and  amendment  made  under 
this  subpart,  when  the  records  relate  to 
matters  within  their  respective  areas  of 
responsibility. 

(1)  For  the  Navy  Department,  the 
Civilian  Executive  Assistants,  the  Chief 
of  Naval  Operations,  the  Commandant 
of  the  Marine  Corps,  the  Chief  of  Naval 
Material,  the  Chief  of  Naval  Personnel, 
the  Chief,  Bureau  of  Medicine  and  Sur¬ 
gery,  the  Auditor  General  of  the  Navy, 
the  Inspector  General  of  the  Navy,  the 
Judge  Advocate  General,  the  General 


Counsel,  and  the  Heads  of  Navy  Depart¬ 
ment  Offices  and  Boards.  The  Judge  Ad¬ 
vocate  General  and  his  Deputy  are  ex¬ 
cluded  from  this  grant  of  authorization 
with  respect  to  denial  of  requests  for 
amendment  of  records,  but  Assistant 
Judge  Advocates  General  are  so  author¬ 
ized. 

(2)  For  shore  activities,  commanders 
of  naval  system  commands;  command¬ 
ants  of  naval  districts;  the  Command¬ 
ers  of  the  Naval  Intelligence  Command, 
Naval  Security  Group  Command,  Naval 
Telecommunications  Command,  and 
Naval  Weather  Service  Command;  the 
Chiefs  of  Naval  Education  and  Training, 
Naval  Air  Training,  and  Naval  Technical 
Training;  the  President,  Naval  War  Col¬ 
lege,  the  Superintendent,  Naval  Post¬ 
graduate  School;  the  Superintendent, 
the  U.S.  Naval  Academy;  the  Chief  of 
Naval  Reserve;  and  the  Oceanographer 
of  the  Navy. 

(3)  For  the  operating  forces,  fleet 
commanders  in  chief,  commanding  gen¬ 
erals  of  the  Fleet  Marine  forces,  and  the 
Commander,  Military  Sealift  Command. 

(4)  Commanders  of  major  Navy  and 
Marine  Corps  activities  designated  by 
the  Chief  of  Naval  Operations  or  the 
Commandant  of  the  Marine  Corps. 

§  701.105  Definitions. 

For  the  purposes  of  this  subpart  and 
subpart  G,  the  following  meanings  apply. 

(a)  Individual.  A  citizen  of  the  United 
States,  or  an  alien  lawfully  admitted  for 
permanent  residence;  or  an  enlistee  in 
the  United  States  naval  service,  includ¬ 
ing  a  minor.  Additionally,  the  legal 
guardian  of  an  individual  or  a  parent  of  a 
minor  has  the  same  rights  as  the  individ¬ 
ual,  and  may  act  on  behalf  of  the  individ¬ 
ual  concerned  under  this  subpart.  Mem¬ 
bers  of  the  naval  service,  once  properly 
accepted,  are  not  minors  for  purposes  of 
this  subpart.  The  use  of  the  term  “indi¬ 
vidual”  does  not,  however,  vest  rights  in 
the  representatives  of  decedents  to  act  on 
behalf  of  the  decedent  under  this  sub¬ 
part,  nor  does  the  term  embrace  individ¬ 
uals  acting  in  an  entrepreneurial  capac¬ 
ity  (e.g.,  sole  proprietorships  and  part¬ 
nerships)  . 

(b)  Maintain.  When  used  in  the  con¬ 
text  of  records  on  individuals,  includes 
“maintain,”  “collect,”  “use,”  or  “dissemi¬ 
nate.” 

(c)  Record.  Any  item,  collection,  or 
grouping  of  information  about  an  indi¬ 
vidual  that  is  maintained  by  or  for  the 
Department  of  the  Navy  or  by  any  ele¬ 
ment  of  the  Navy  Department,  operat¬ 
ing  forces,  or  shore  establishment,  in¬ 
cluding,  but  not  limited  to,  his  educa¬ 
tion,  financial  transactions,  medical  his¬ 
tory,  qualifications,  service  data,  and 
criminal  or  employment  history,  and 
which  contains  his  name,  or  the  identi¬ 
fying  number,  symbol,  or  other  identi¬ 
fying  particular  assigned  to  the  individ¬ 
ual,  such  as  a  finger  or  voice  print  or  a 
photograph. 

(d)  System  of  records.  A  group  of  rec¬ 
ords  under  the  control  of  the  Depart¬ 
ment  of  the  Navy  or  of  any  element  of 
the  Navy  Department,  operating  forces, 
or  shore  establishment,  from  which  in¬ 
formation  is  retrieved  by  the  name  of 
the  individual  or  by  some  identifying 
number,  symbol,  or  other  identifying 
particular  assigned  to  the  individual. 


(e)  System  manager.  That  official  who 
has  overall  responsibility  for  records 
within  a  particular  system.  System  man¬ 
agers  are  indicated  in  the  published  rec¬ 
ord  system  notices.  If  more  than  one  of¬ 
ficial  is  indicated  as  a  system  manager, 
initial  contact  should  be  established  at 
the  appropriate  level  (e.g.,  for  local  rec¬ 
ords,  contact  should  be  made  at  the  local 
level) . 

(f)  Routine  use.  When  used  with  re¬ 
spect  to  the  disclosure  of  a  record,  the 
use  of  a  record  in  compliance  with  the 
section  of  the  published  record  system 
notice  specifying  routine  uses,  provided 
such  use  is  compatible  with  the  purpose 
for  which  the  record  was  collected. 
Normally  this  term  is  used  in  connection 
with  interagency  transfers  of  records, 
rather  than  transfers  within  the  Depart¬ 
ment  of  Defense  and  the  Department 
of  the  Navy. 

(g)  Disclosure.  The  conveyance  of  any 
information  from  a  record  by  any  means 
of  communication  to  any  other  person 
or  entity. 

§  701.106  Notification  and  access  pro¬ 
cedures. 

Notification  procedures  enable  an  in¬ 
dividual  to  ascertain  from  the  system 
manager  whether  or  not  a  particular  sys¬ 
tem  of  records  contains  a  record  pertain¬ 
ing  to  the  inquiring  individual.  If  the 
system  of  records  does  contain  such 
a  record,  the  requesting  individual  may 
then  ascertain  the  contents  of  his  record 
under  the  access  procedures.  Individuals 
utilizing  these  procedures  may  be  re¬ 
quired  to  verify  their  identity. 

(a)  Notification.  Subject  to  provisions 
below,  the  system  manager  shall  notify 
the  requesting  individual  whether  or  not 
the  system  of  records  contains  a  record 
pertaining  to  him,  if  the  system  is  ade¬ 
quately  identified  and  the  individual 
provides  the  information  and  individual 
identifiers  (e.g.,  full  name  and  social  se¬ 
curity  number)  needed  to  locate  records 
in  that  particular  system. 

( 1 )  The  individual  requesting  notifica¬ 
tion  may  be  required  to  make  his  request 
in  writing,  or  to  sign  a  written  record  of 
the  request. 

(2)  This  subpart  does  not  entitle  an 
individual  to  receive  the  above  notifica¬ 
tion  if  a  denial  authority  has  exercised  an 
exemption.  Such  exercise  must  be  based 
on  an  exemption  for  the  system  of  rec¬ 
ords  from  the  notification  requirements 
of  5  U.S.C.  §  552a,  granted  by  the  Sec¬ 
retary  of  the  Navy  in  accordance  with 
§  701.111  and  listed  in  subpart  G.  In  a 
case  where  a  system  manager  who  is  not 
a  denial  authority  under  §  701.104(c) 
deems  a  denial  of  a  request  for  notifi¬ 
cation  to  be  an  appropriate  action,  the 
system  manager  shall  forward  the  re¬ 
quest,  his  recommendations,  and  related 
information  to  the  appropriate  denial 
authority  for  determination.  Denial  au¬ 
thorities  are  authorized  to  exercise  ex¬ 
emptions  to  requests  for  notification  only 
in  cases  where  it  has  been  determined 
to  be  in  the  interest  of  the  department 
to  do  so. 

(i)  If  the  denial  authority  concurs  in 
the  recommendation  for  exercise  of  an 
exemption,  the  denial  authority  shall 
promptly  inform  the  individual  request¬ 
ing  notification  of  the  exercise  of  the  ex¬ 
emption  and  of  the  reasons  for  the  ex- 


37570 


PKOPOSED  RULES 


emption.  A  copy  of  the  denial  letter  shall 
be  forwarded  directly  to  the  Chief  of 
Naval  Operations  (Op-09B1)  or  the  Com¬ 
mandant  of  the  Marine  Corps,  as  appro¬ 
priate,  in  every  case  where  an  exemption 
is  exercised.  These  officials  shall  main¬ 
tain  copies  of  all  denials  in  a  form  that 
is  suitable  for  rapid  retrieval,  periodic 
statistical  compilation,  and  manage¬ 
ment  evaluation. 

lii)  If  the  denial  authority  determines 
that  the  exemption  shall  not  be  exer¬ 
cised,  the  denial  authority  shall  direct 
the  system  manager  to  provide  notifica¬ 
tion. 

<b)  Access.  Subject  to  the  provisions 
below,  the  system  manager,  upon  request 
from  an  individual,  shall  permit  the  in¬ 
dividual  to  review  records  pertaining  to 
that  individual  from  the  system  of  rec¬ 
ords  in  a  form  that  is  comprehensible  to 
the  individual,  if  the  system  is  adequately 
identified  and  the  individual  provides 
the  information  and  individual  identi¬ 
fiers  (e.g.,  full  name  and  social  security 
number)  needed  to  locate  records  in  that 
particular  system.  The  system  manager 
shall  also  permit  the  individual  to  ob¬ 
tain  a  copy  of  his  record  at  a  cost  in  ac¬ 
cordance  with  the  duplication  fee  pro¬ 
visions  of  subpart  D,  unless  such  fees  are 
waived.  The  system  manager  shall  pro¬ 
vide  a  copy  of  the  system’s  rules  for 
access  upon  request. 

(1)  The  individual  requesting  access 
may  be  required  to  make  his  request  in 
writing,  or  to  sign  a  written  record  of 
request.  This  is  particularly  important  if 
a  denial  is  anticipated.  The  requesting 
individual  may  also  be  required  to  give 
written  acknowledgment  that  he  has  been 
granted  access  to  the  requested  record. 

(2)  This  subpart  does  not  entitle  an 
individual  to  access  if  a  denial  authority 
has  exercised  an  exemption.  Such  exer¬ 
cise  must  be  based  on  an  exemption  for 
the  system  of  records  from  the  access 
requirements  of  5  U.S.C.  552a,  granted 
by  the  Secretary  of  the  Navy  in  accord¬ 
ance  with  §  701.111. 

(i)  In  a  case  where  the  system  man¬ 
ager  deems  denial  of  a  request  for  ac¬ 
cess  to  be  an  appropriate  action,  and  he 
is  not  a  denial  authority  under  §  701.104 
(c),  he  shall  forward  the  request,  his 
recommendations,  and  related  informa¬ 
tion  <  including  the  requested  records,  if 
practical,  or  else  representative  samples 
of  the  material  therein)  to  the  appro¬ 
priate  denial  authority  for  determina¬ 
tion.  Denial  authorities  are  authorized  to 
exercise  exemptions  to  requests  for  access 
only  in  cases  where  it  has  been  deter¬ 
mined  to  be  in  the  interest  of  the  depart¬ 
ment  to  do  so. 

(ii)  If  the  denial  authority  concurs  in 
the  recommendation  for  exercise  of  an 
exemption,  he  shall  promptly  inform  the 
requesting  individual  of  the  exercise  of 
the  exemption  and  of  the  reasons  for  the 
exemption. 

(iii)  A  copy  of  the  denial  letter  shall  be 
forwarded  directly  to  the  Chief  of  Naval 
Operations  (Op-09B1)  or  the  Comman¬ 
dant  of  the  Marine  Corps,  as  appropriate, 
in  every  case  where  an  exemption  is  ex¬ 
ercised.  These  officials  shall  maintain 
copies  of  all  denials  in  a  form  that  is 
suitable  for  rapid  retrieval,  periodic  sta¬ 
tistical  compilation,  and  management 
evaluation.  If  the  denial  authority  deter¬ 


mines  that  the  exemption  shall  not  be 
exercised,  the  denial  authority  shall  di¬ 
rect  the  system  manager  to  provide  ac¬ 
cess. 

(3)  If  an  individual  is  granted  access 
to  his  record  in  person,  the  individual 
may  be  accompanied  by  a  person  of  his 
own  choosing  to  review  the  record,  but 
the  individual  may  be  asked  to  furnish 
a  writtten  statement  authorizing  discus¬ 
sion  of  that  individual’s  record  in  the  ac¬ 
companying  person’s  presence. 

(4)  If  copying  is  the  only  means  where¬ 
by  the  record  can  be  made  available  to 
the  individual  (e.g.,  when  a  copy  must 
be  made  in  order  to  delete  information 
contained  in  the  record  pertaining  to  an¬ 
other  individual) ,  then  reproduction  fees 
will  not  be  assessed. 

(5)  This  subpart  does  not  require  that 
an  individual  be  given  access  to  a  record 
which  is  not  retrieved  by  name  or  by 
other  individual  identifier. 

(6)  Access  to  a  record  or  a  copy  thereof 
will  not  be  denied  because  the  record  is 
not  readily,  physically  available  (i.e.,  on 
magnetic  tape)  or  because  the  context  of 
the  record  may  disclose  sensitive  infor¬ 
mation  about  another  individual.  To  pro¬ 
tect  the  personal  privacy  of  other  individ¬ 
uals  who  may  be  identified  in  a  record, 
an  extract  shall  be  prepared,  deleting 
only  that  information  which  would  not 
be  released  to  the  requesting  individual 
under  subparts  A  and  B. 

(7)  A  medical  record  shall  be  disclosed 
to  the  individual  to  whom  it  pertains  un¬ 
less,  in  the  judgment  of  a  physician,  ac¬ 
cess  to  such  record  could  have  an  ad¬ 
verse  effect  upon  the  individual’s  physical 
or  mental  health.  When  it  has  been  de¬ 
termined  that  the  disclosure  of  medical 
information  could  have  an  adverse  effect 
upon  the  individual  to  whom  it  pertains, 
the  individual  may  be  asked  to  name  a 
physician  to  whom  the  information  shall 
then  be  transmitted.  This  shall  not  be 
deemed  a  denial  of  a  request  for  access. 

(8)  All  requests  received  from  individ¬ 
uals  for  access  to  records  pertaining  to 
themselves  and  which  are  located  in  a 
system  of  records,  as  defined  above,  will 
be  processed  in  accordance  with  this 
subpart,  even  though  the  requesters  may 
see  the  records  under  the  5  U.S.C.  §  852 
or  subpart  A  of  this  part.  Requests  from 
individuals  for  records  pertaining  to 
themselves,  but  which  in  a  system  of 
records,  shall  be  processed  in  accordance 
with  subpart  A.  Any  subsequent  requests 
for  amendment,  however,  shall  be  proc¬ 
essed  in  accordance  with  this  subpart. 

(9)  Normally,  requests  for  access  to 
records  should  be  acknowledged  within 
10  working  days  of  receipt,  and  access 
provided  within  30  working  days. 

(10)  Copies  of  investigatory  records 
compiled  by  an  investigative  organiza¬ 
tion,  but  in  the  temporary  custody  of 
another  organization  holding  the  record 
for  disciplinary,  administrative,  judicial, 
investigative,  or  other  purposes,  are  the 
records  of  the  originating  investigative 
organization.  Upon  completion  of  the 
official  action,  the  investigative  reports 
shall  be  destroyed  or  returned,  in  accord¬ 
ance  with  the  instructions  of  the  origi¬ 
nating  investigative  agency.  Individuals 
seeking  notification  or  access,  or  making 
other  requests  under  this  subpart  con¬ 
cerning  such  records,  shall  be  directed 


to  the  originating  investigative  organiza¬ 
tion.  For  example,  a  request  for  notifica¬ 
tion  or  access  to  a  Naval  Investigative 
Service  report  should  be  forwarded  di¬ 
rectly  to  the  Director,  Naval  Investiga¬ 
tive  Service. 

(11)  This  subpart  does  not  entitle  an 
individual  to  have  access  to  any  informa¬ 
tion  compiled  in  reasonable  anticipation 
of  a  civil  action  or  proceeding.  System 
managers  shall  forward  the  requests  and 
related  records  to  the  appropriate  denial 
authorities,  in  cases  where  denial  on 
these  grounds  appears  to  be  appropriate. 

(c)  Verification  of  identity.  Prior  to 
being  given  notification  or  granted  ac¬ 
cess  to  personal  information,  an  indi¬ 
vidual  may  be  required  by  the  system 
manager  to  provide  reasonable  verifica¬ 
tion  of  his  identity. 

( 1 )  No  verification  of  identity  shall  be 
required  of  an  individual  seeking  access 
to  records  which  are  otherwise  available 
to  any  member  of  the  public  under  sub¬ 
part  A. 

(2)  In  the  case  of  an  individual  who 
seeks  notification  or  access  in  person, 
verification  of  identity  will  normally  be 
made  from  those  documents  which  an  in¬ 
dividual  is  likely  to  have  readily  avail¬ 
able,  such  as  an  employee  or  military 
identification  card,  driver’s  license,  or 
medical  card. 

(3)  When  access  or  notification  is  re¬ 
quested  by  mail,  verification  of  identity 
may  be  obtained  by  requiring  the  indi¬ 
vidual  to  provide  certain  minimum  iden¬ 
tifying  data,  such  as  date  of  birth  and 
some  item  of  information  in  the  record 
which  only  the  concerned  Individual 
would  likely  know.  If  the  sensitivity  of 
the  information  in  the  record  warrants, 
a  signed  and  notarized  statement  of 
identity  may  be  required. 

(4)  When  a  record  has  already  been 
identified,  an  individual  shall  not  be  de¬ 
nied  access  for  refusing  to  disclose  his 
social  security  number. 

§  701.107  Disclosure  to  others  and  dis¬ 
closure  accounting. 

(a)  Conditions  of  disclosure.  No  rec¬ 
ord  contained  in  a  system  of  records  shall 
be  disclosed,  except  pursuant  to  a  writ¬ 
ten  request  by,  or  with  the  prior  writ¬ 
ten  consent  of,  the  individual  to  whom 
the  record  pertains,  unless  disclosure  of 
the  record  falls  within  one  of  the  areas 
noted  below.  Disclosure  to  third  parties 
on  the  basis  of  a  written  consent  or  re¬ 
quest  of  the  individual  is  permitted,  but 
not  required,  by  this  subpart. 

(1)  Personnel  of  the  Department  of  the 
Navy.  Disclosure  may  be  made  to  those 
personnel  of  the  Department  of  the  Navy, 
or  element  thereof  (including  private 
contractor  personnel  who  are  engaged  to 
perform  services  needed  in  connection 
with  the  operation  of  a  Department  of 
the  Navy  system  of  records) ,  who  have  a 
need  for  the  record  in  the  performance  of 
their  duties,  when  this  use  is  compatible 
with  the  purpose  for  which  the  record  is 
maintained.  This  provision  is  based  on 
the  “need  to  know”  concept.  This  would 
include,  for  example,  disclosure  to  per¬ 
sonnel  managers,  review  boards,  dis¬ 
cipline  officers,  medical  officers,  investi¬ 
gating  officers,  and  representatives  of  the 
Auditor  General,  the  Naval  Inspector 
General,  and  the  Naval  Investigative 
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Service,  who  require  the  information  in 
order  to  discharge  their  duties. 

(2)  Personnel  of  the  Department  of 
Defense.  Disclosure  may  be  made  to  per¬ 
sonnel  of  the  Department  of  Defense 
( and  to  officials  and  employees  of  private 
contractors  of  the  Department  of  Defense 
who  are  engaged  to  perform  services 
needed  in  connection  with  the  operation 
of  a  Department  of  Defense  system  of 
records)  who  have  a  need  for  the  record 
in  the  performance  of  their  duties,  when 
this  use  is  compatible  with  the  purpose 
for  which  the  record  is  maintained.  This 
would  include,  for  example,  disclosure  to 
personnel  of  the  Joint  Chiefs  of  Staff, 
Armed  Forces  Entrance  and  Examining 
Stations,  Defense  Investigative  Service, 
and  of  the  other  military  departments, 
when  the  information  is  needed  to  com¬ 
plete  an  official  duty.  It  would  also  in¬ 
clude  transfer  of  records  between  naval 
components  and  non-DOD  agencies  in 
connection  with  the  Personnel  Exchange 
Program,  and  interagency  support  agree¬ 
ments.  While  the  latter  transfers  meet 
the  criteria  for  both  interagency  dis¬ 
closure  and  “routine  use,”  they  should  be 
treated  as  intra-agency  disclosures  for 
purposes  of  the  accounting  requirements 
of  subparagraph  (b)(1)  of  this  section. 

(3)  Freedom  of  Information  Act.  Dis¬ 
closure  may  be  made  of  those  records 
required  to  be  released  under  5  U.S.C. 
S  552  and  subpart  A  of  this  part.  Some 
examples  of  information  pertaining  to 
military  personnel  which  are  normally 
released  are:  name,  rank  or  rate,  date 
of  rank,  salary,  duty  status,  present  and 
past  duty  stations,  duty  station  address, 
finalized  future  duty  station,  office  phone 
number,  source  of  commission,  military 
and  civilian  educational  level,  and  pro¬ 
motion  sequence  number.  The  following 
are  examples  of  releasable  information 
pertaining  to  civilian  employee? :  name, 
grade,  duty  station,  date  of  employment, 
title  of  position,  salary,  office  phone  num¬ 
ber,  and  office  address. 

(4)  Routine  Use.  Disclosure  may  be 
made  for  a  "routine  use”  as  defined  in 
§  701.105(f)  and  as  described  in  the  pub¬ 
lished  record  system  notice. 

(5)  Bureau  of  the  Census.  Disclosure 
may  be  made  to  the  Bureau  of  Census  for 
purposes  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity  au¬ 
thorized  by  law. 

(6)  Statistical  research  or  reporting. 
Disclosure  may  be  made  to  a  recipient 
who  has  provided  adequate  written  as¬ 
surance  that  the  record  will  be  used  solely 
as  a  statistical  research  or  reporting  rec¬ 
ord,  provided  the  record  is  transferred  in 
a  form  that  is  not  individually  identifia¬ 
ble  (l.e.,  the  identity  of  the  individual 
cannot  be  deduced  by  tabulation  or  other 
methodology) .  The  written  request  must 
state  the  purpose  of  the  request,  and  will 
be  made  a  part  of  the  activity’s  account¬ 
ing  disclosure.  Accountings  are  not  re¬ 
quired  when  activities  publish  gross  sta¬ 
tistics  covering  a  population  in  a  system 
of  records  (eg.,  statistics  on  employee 
turnover  rates,  military  reenlistment 
rates,  and  sick  leave  usage  rates) . 

(7)  National  Archives.  Disclosure  may 
be  made  to  the  National  Archives  when 
the  record  has  sufficient  historical  or 


other  value  to  warrant  continued  pres¬ 
ervation  by  the  U.S.  Government,  or  for 
evaluation  by  the  Administrator  of  Gen¬ 
eral  Services  or  his  designee  to  determine 
whether  the  record  has  such  value.  Rec¬ 
ords  transferred  to  a  federal  records 
center  for  storage  or  safekeeping  do  not 
fall  under  this  provision.  Such  transfers 
are  not  considered  disclosures  under  5 
U.S.C.  §  552a,  since  the  records  remain 
under  the  control  of  the  transferring 
element.  Accounting  is  not  required  for 
transfers  of  records  to  federal  records 
centers. 

(8)  Civil  or  criminal  law  enforcement 
activity.  Disclosure  may  be  made  to  an¬ 
other  agency  or  instrumentality  of  any 
governmental  jurisdiction  within  or 
under  the  control  of  the  United  States, 
for  a  civil  or  criminal  law  enforcement 
activity,  if  the  activity  is  authorized  by 
law,  and  if  the  head  of  the  agency  or  in¬ 
strumentality  has  made  a  written  request 
to  the  activity  which  maintains  the 
record,  specifying  the  particular  record 
desired  and  the  law  enforcement  purpose 
for  which  the  record  is  sought.  The  head 
of  the  agency  or  instrumentality  may 
have  delegated  authority  to  request 
records  to  other  officials.  Requests  by 
these  designated  officials  shall  be  hon¬ 
ored  if  they  provide  satisfactory  evidence 
of  their  authorization  to  request  records. 
Blanket  requests  for  all  records  pertain¬ 
ing  to  an  individual  shall  not  be  honored. 
A  record  may  also  be  disclosed  to  a  law 
enforcement  activity,  provided  that  such 
disclosure  has  been  established  as  a 
“routine  use”  in  the  published  record 
system  notice.  Disclosure  to  foreign  law 
enforcement  agencies  is  not  covered 
under  the  provisions  of  this  paragraph. 
Such  disclosures  may  be  made  only  pur¬ 
suant  to  an  established  “routine  use” 
published  in  the  record  system  notice  or 
pursuant  to  other  governing  authority. 

(9)  Emergency  conditions.  Disclosure 
may  be  made  under  emergency  condi¬ 
tions  involving  compelling  circumstances 
affecting  the  health  and  safety  of  a  per¬ 
son,  provided  that  notification  of  the  dis¬ 
closure  is  transmitted  to  the  last  known 
address  of  the  individual  to  whom  the 
record  pertains.  For  example,  an  activity 
may  disclose  records  when  the  time  re¬ 
quired  to  obtain  the  consent  of  the  in¬ 
dividual  to  whom  the  record  pertains 
might  result  in  a  delay  which  could  im¬ 
pair  the  health  or  safety  of  a  person.  The 
individual  about  whom  the  records  are 
disclosed  need  not  necessarily  be  the  in¬ 
dividual  whose  health  or  safety  is  in  peril 
(e.g.,  release  of  dental  charts  on  several 
individuals  in  order  to  identify  a  person 
injured  in  an  accident) . 

(10)  Congress.  Disclosure  may  be  made 
to  either  House  of  Congress,  or,  to  the 
extent  of  matters  within  its  jurisdiction, 
to  any  committee  or  subcommittee 
thereof,  or  to  any  joint  committe  of 
Congress  or  subcommittee  thereof,  5 
U.S.C.  §  552a  does  not  authorize  the  dis¬ 
closure  of  records  to  members  of  Con¬ 
gress  acting  in  their  individual  capacities 
or  on  behalf  of  their  constituents,  unless 
the  individual  to  whom  the  record  per¬ 
tains  has  consented.  Naval  activities  are 
to  continue  to  provide  prompt  and  courte¬ 
ous  response  to  all  Congressional  in¬ 
quiries. 


(i)  When  an  inquiry  by  a  member  of 
Congress  acting  in  his  own  capacity  on 
behalf  of  a  constituent  would  require  the 
disclosure  of  records  concerning  that 
constituent,  a -properly  signed  letter  from 
the  individual  concerned  to  the  member 
of  Congress  may  be  considered  an  in¬ 
formed  consent  for  the  purposes  of  dis¬ 
closing  those  portions  of  the  individual’s 
records  which  pertain  directly  to  matters 
discussed  in  the  letter,  provided  that  it 
is  satisfactorily  verified  that  the  letter 
was,  in  fact,  signed  by  the  individual 
concerned.  The  activity  shall  not  how¬ 
ever,  make  a  direct  inquiry  to  the  indi¬ 
vidual  regarding  his  letter  to  the  member 
of  Congress. 

(ii)  If  there  is  any  reasonable  basis 
for  not  interpreting  the  constituent’s  let¬ 
ter  as  an  informed  consent,  or  if  the  in¬ 
quiry  does  not  contain  a  letter  from  the 
subject  individual,  the  member  of  Con¬ 
gress  should  be  informed  that  the  in¬ 
formation  cannot  be  released  without  a 
violation  of  5  U.S.C.  §  552a.  and  be  re¬ 
quested  to  provide  satisfactory  written 
authorization  from  the  concerned  in¬ 
dividual  consenting  to  the  disclosure 
of  the  individual’s  records  to  the  member 
of  Congress. 

(11)  Comptroller  General.  Disclosure 
may  be  made  to  the  Comptroller  General 
of  the  United  States,  or  to  any  of  his 
authorized  representatives,  in  the  course 
of  the  performance  of  the  duties  of  the 
General  Accounting  Office. 

(12)  Court  of  competent  jurisdiction. 
Disclosure  may  be  made  in  response  to 
an  order  from  a  court  of  competent  juris¬ 
diction,  subject  to  the  following  pro¬ 
visions: 

(i)  When  a  record  is  disclosed  under 
compulsory  legal  process,  and  the  is¬ 
suance  of  that  order  is  made  public  by 
the  court  which  issued  it,  activities  shall 
make  reasonable  efforts  to  notify  the  in¬ 
dividual  to  whom  the  record  pertains  of 
the  disclosure  and  the  nature  of  the  in¬ 
formation  provided.  This  requirement 
may  be  satisfied  by  notifying  the  indi¬ 
vidual  by  mail  at  the  last  known  address 
contained  in  the  activity  records. 

(ii)  Upon  being  served  with  an  order 
which  is  not  a  matter  of  public  record, 
an  activity  shall  seek  to  be  advised  as  to 
when  it  will  become  public.  An  account¬ 
ing  for  the  disclosure  shall  be  made  at 
the  time  the  activity  complies  with  the 
order,  but  neither  the  identity  of  the 
party  to  whom  the  disclosure  was  made 
nor  the  purpose  of  the  disclosure  shall 
be  made  available  to  the  concerned  in¬ 
dividual  unless  the  court  order  has  be¬ 
come  a  matter  of  public  record. 

(b)  Disclosure  accountings.  Each  ac¬ 
tivity,  with  respect  to  each  system  of 
records,  or  portion  thereof,  which  it 
maintains,  shall  keep  an  accurate  ac¬ 
counting  of  the  date,  nature,  and  pur¬ 
pose  of  each  disclosure  of  a  record  to  any 
person  or  to  another  agency,  and  the 
name  and  address  of  the  person  or 
agency  to  whom  the  disclosure  is  made. 
The  only  exceptions  to  this  accounting 
requirement  are  for  those  disclosures 
made  pursuant  to  subparagraphs  (a)  (1) , 
(a)  (2),  and  (a)  (3)  of  this  section,  or  as 
otherwise  provided  herein. 

(1)  An  accounting  is  required  for  dis- 
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closures  outside  the  Department  of  De¬ 
fense.  even  when  such  disclosure  is  with 
the  written  consent,  or  at  the  request  of, 
the  individual.  An  accounting  is  not  re¬ 
quired  when  access  is  granted  under 
5  701.106.  An  accounting  is  required  for 
the  disclosure  for  statistical  or  research 
purposes  under  subparagraph  (a)(6)  of 
this  section,  except  when  the  disclosure 
involves  gross  statistics  covering  a  popu¬ 
lation  of  a  system  of  records  and  identifi¬ 
cation  of  individuals  is  not  possible,  or 
similar  statistical  data  are  already  avail¬ 
able  to  the  public. 

(2)  The  purpose  of  the  accounting  re¬ 
quirements  is  to: 

(i)  Allow  individuals  to  determine  to 
whom  their  records  have  been  disclosed ; 

(ii>  Provide  a  basis  for  subsequently 
advising  recipients  of  records  of  any  dis¬ 
puted  or  corrected  records ;  and 

(iii)  Provide  an  audit  trail  for  sub¬ 
sequent  review  of  activity  compliance. 

(3)  In  view  of  the  variety  of  record 
systems,  activities  are  given  broad  lati¬ 
tude  in  devising  their  methods  of  ac¬ 
counting.  There  is  no  requirement  that 
the  accounting  be  retained  on  a  record- 
by-record  basis — although  that  may  fre¬ 
quently  be  the  simplest  approach.  The 
determining  factor  for  the  accounting 
method  should  be  the  ability  to  meet  the 
above  noted  objectives. 

(4)  The  record  of  accounting  must  be 
retained  for  at  least  five  years  after  the 
last  disclosure,  or  the  life  of  the  record, 
whichever  is  longer.  There  is  no  require¬ 
ment  to  maintain  an  accounting  of  dis¬ 
closures  of  disclosure  accountings.  Noth¬ 
ing  in  5  U.S.C.  §  552a  requires  the  re¬ 
tention  of  the  record  itself  where  the 
record  could  otherwise  lawfully  be  dis¬ 
posed  of  sooner  in  accordance  with  Sec¬ 
retary  of  the  Navy  Instruction  5212.5B, 
Disposal  of  Navy  and  Marine  Corps 
Records. 

(5)  Upon  request  of  the  individual  to 
whom  the  record  pertains,  activities  must 
make  available  to  that  individual  all  in¬ 
formation  in  its  accounting  of  disclosures 
except  that  pertaining  to  disclosures 
under  subparagraph  a(12)(ii)  of  this 
section  and  disclosures  at  the  request  of 
the  head  of  another  agency  or  Govern¬ 
ment  instrumentality  for  law  enforce¬ 
ment  purposes  under  subparagraph  a(8) 
of  this  section.  Activities  may  wish  to 
maintain  the  accounting  of  such  disclo¬ 
sures  in  such  a  manner  that  the  nota¬ 
tions  of  these  disclosures  are  readily 
segregable,  in  order  to  preclude  improper 
release  to  the  individual.  Since  activities 
may  not  always  maintain  disclosure  ac¬ 
countings  in  readily  comprehensible 
form,  the  process  of  making  the  account¬ 
ing  available  may  require  transforma¬ 
tion  of  the  data,  in  order  to  make  it 
intelligible  to  the  individual. 

(c)  Accuracy  requirements.  Prior  to 
disclosing  any  record  about  an  individual 
to  any  person  other  than  an  agency  and 
other  than  pursuant  to  5  U.S.C.  §  552 
and  subpart  A  of  this  part,  reasonable 
efforts  are  required  to  ensure  that  such 
records  are  accurate,  complete,  timely, 
and  relevant  for  Department  of  the  Navy 
purposes.  It  may  be  appropriate  to  ad¬ 
vise  the  recipient  that  the  information 
was  accurate  as  of  a  specific  date,  or 
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otherwise  give  guidance  concerning  Its 
quality. 

(d)  Mailing  lists.  No  activity  nor  any 
member  or  employee  of  the  Department 
of  the  Navy  shall  sell  or  rent  individuals' 
names  and  addresses  unless  such  action 
is  specifically  authorized  by  law.  This 
provision  should  not  be  construed  to  re¬ 
quire  the  withholding  of  names  and  ad¬ 
dresses  otherwise  permitted  to  be  made 
public. 

(e)  Delegation  of  authority.  The  au¬ 
thority  to  request  records  for  a  civil  or 
criminal  law  enforcement  activity  under 
5  U.S.C.  §  552a(b)  (7)  is  delegated  to  the 
Commandant  of  the  Marine  Corps,  the 
Director  of  Naval  Intelligence,  the  Judge 
Advocate  General,  and  the  General 
Counsel.  These  officials  may  further  del¬ 
egate  this  authority  to  deputies,  assist¬ 
ants,  and  other  subordinates  who  exer¬ 
cise  authority  over  an  office  or  division. 

§  701.108  Amendment  procedures. 

Subject  to  the  provisions  below,  an  in¬ 
dividual  shall  be  given  the  opportunity  to 
make  a  written  request  to  the  system 
manager  that  his  record  be  amended.  If 
a  denial  authority  refuses  a  request  to 
amend  the  record,  the  individual  may 
seek  a  review  of  that  initial  determina¬ 
tion  by  the  review  authority.  The  system 
manager  shall  provide  a  copy  of  the  sys¬ 
tem's  rules  for  amendment  of  records, 
upon  request.  (See  §  701.117.) 

(a)  Requests  for  amendment.  Requests 
should  be  directed  to  the  system  man¬ 
ager,  and  should  contain  sufficient  in¬ 
formation  to  locate  and  identify  the 
record,  a  description  of  the  items  to  be 
amended,  the  reasons  for  requesting 
amendment,  and  any  available  informa¬ 
tion  the  individual  can  provide  in  sup¬ 
port  of  his  request.  Instructions  for  the 
preparation  of  a  request  and  any  forms 
employed  by  the  system  manager  should 
be  as  brief  and  simple  as  possible.  Re¬ 
quests,  however,  may  not  be  rejected  nor 
may  the  requesting  individual  be  re¬ 
quired  to  resubmit  his  request,  unless 
additional  information  is  essential  to 
process  the  request. 

(1)  If  a  request  is  incomplete  or  in¬ 
accurate,  the  individual  normally  should 
be  asked  to  clarify  the  request  as  needed. 

(2)  Individuals  may  be  required  to 
provide  verification  of  their  identity 
when  making  requests  for  amendment  as 
provided  in  §  701.108(c)  to  assure  that 
the  requester  is  seeking  to  amend  his 
own  records  and  not,  inadvertently  or 
intentionally,  the  records  of  another 
individual. 

(b)  Acknowledgment.  The  system 
manager  shall  provide  the  requesting  in¬ 
dividual  with  a  written  acknowledgment 
of  receipt  of  a  request  for  amendment 
of  a  record  within  10  working  days  (i.e., 
excludes  Saturdays,  Sundays,  and  legal 
public  holidays)  after  receipt  by  the 

, proper  office.  The  acknowledgment  shall 
clearly  identify  the  request  and  advise 
the  individual  when  he  may  expect  to  be 
advised  of  action  taken  on  the  request. 
No  separate  acknowledgment  of  receipt 
is  necessary  if  the  request  can  be  acted 
upon  and  the  individual  advised  of  such 
action  within  the  10-working-day  period. 


If  the  request  for  amendment  is  pre¬ 
sented  in  person,  written  acknowledg¬ 
ment  may  be  provided  at  the  time  the 
request  is  presented. 

(c)  Initial  determination.  In  response 
to  a  request  to  amend  a  record,  the  sys¬ 
tem  manager  shall  ensure  that  the  rec¬ 
ord  is  reviewed  to  determine  whether,  in 
light  of  the  information  presented  by  the 
requesting  individual  and  all  other  rea¬ 
sonably  available  related  records,  amend¬ 
ment  is  warranted  to  make  it  sufficiently 
accurate,  relevant,  timely,  and  complete 
as  to  ensure  fairness  in  any  determina¬ 
tion  made  about  the  individual  on  the 
basis  of  the  record.  If  the  requested 
amendment  involves  the  deletion  of  in¬ 
formation,  the  record  shall  also  be  re¬ 
viewed  to  determine  whether  the  in¬ 
formation  in  question  is  relevant  and 
necessary  to  accomplish  a  purpose  of 
the  Department  of  the  Navy  required  by 
statute  or  by  executive  order  of  the 
President. 

(1)  The  provisions  of  this,  section  are 
not  intended  to  permit  the  alteration 
of  evidence  presented  in  the  course  of 
judicial  or  quasi-judicial  proceedings. 
Any  changes  in  such  records  should  be 
made  only  through  the  procedures  estab¬ 
lished  for  changing  such  records.  These 
provisions  are  also  not  designed  to  per¬ 
mit  collateral  attack  upon  that  which 
has  already  been  the  subject  of  a  judicial 
or  quasi-judicial  action.  For  example,  an 
individual  would  not  be  permitted  to 
challenge  a  court-martial  conviction 
under  this  subpart,  but  the  individual 
would  be  able  to  challenge  the  accuracy 
with  which  a  conviction  has  been  re¬ 
corded  in  a  record. 

(2)  This  subpart  does  not  entitle  an 
individual  to  amendment  of  his  record 
upon  request  if  a  denial  authbrity  has 
exercised  an  exemption.  Such  exercise 
must  be  based  on  an  exemption  for  the 
system  of  records  from  the  amendment 
requirements  of  5  U.S.C.  S  552a,  granted 
by  the  Secretary  of  the  Navy  in  accord¬ 
ance  with  §  701.111  (see  subpart  G).  In 
cases  where  the  system  manager  who 
is  not  a  denial  authority  under  §  701.104 
(c)  deems  denial  of  a  request  to  amend 
a  record  to  be  an  appropriate  action,  the 
system  manager  shall  forward  the  re¬ 
quest,  recommendations,  and  related  in¬ 
formation  (including  a  copy  of  the  rec¬ 
ord  which  is  the  subject  of  the  request) 
to  the  appropriate  denial  authority  for 
determination.  Denial  authorities  are  au¬ 
thorized  to  exercise  an  exemption  to  a 
request  to  amend  a  record  only  in  cases 
where  it  has  been  determined  to  be  in 
the  interests  of  the  department  to  do  so. 

(i)  If  the  denial  authority  concurs  in 
the  recommendation  for  exercise  of  an 
exemption,  he  shall  promptly  notify  the 
requesting  individual  of  the  exercise  of 
the  exemption  and  of  the  reasons  for  the 
exemption.  A  copy  of  the  denial  letter 
shall  be  forwarded  directly  to  the  Chief 
of  Naval  Operations  (Op-09B1)  or  to  the 
Commandant  of  the  Marine  Corps,  as 
appropriate,  in  every  case  where  an  ex¬ 
emption  is  exercised.  These  officials  shall 
maintain  copies  of  all  denials  in  a  form 
that  is  suitable  for  rapid  retrieval,  pe¬ 
riodic  statistical  compilation,  and  man¬ 
agement  evaluation. 
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(ii)  If  the  denial  authority  determines 
that  an  exemption  shall  not  be  exercised, 
the  file  shall  be  returned  to  the  system 
manager  for  action,  in  accordance  with 
subparagraphs  (c)(5)  or  (c)(6)  of  this 
section. 

(3)  Routine  requests  for  administra¬ 
tive  corrections  of  records  not  made  un¬ 
der  this  subpart  or  5  U.S.C.  §  552a  need 
not  be  treated  as  formal  written  requests 
for  amendment  under  this  subpart. 

(4)  Whenever  practicable,  the  system 
manager  shall  make  a  determination  on 
a  request  for  amendment  of  a  record 
within  30  working  days  of  receipt. 

(5)  If  the  system  manager  determines 
that  the  individual’s  request  to  amend 
a  record  is  warranted,  the  system  man¬ 
ager  shall  promptly  amend  the  record 
and  advise  the  individual  of  that  action 
and  its  effect.  Amendments  to  records 
should  be  made  in  accordance  with  ex¬ 
isting  directives  and  established  proce¬ 
dures  for  changing  records,  if  applicable 
and  consistent  with  this  subpart.  The 
system  manager  shall  advise  previous 
recipients  of  the  record  for  whom  a  dis¬ 
closure  accounting  has  been  made  that 
the  record  has  been  amended,  and  of  the 
substance  of  the  correction. 

(6)  If  a  system  manager  who  is  not 
a  denial  authority  under  { 701.104(c) 
determines  that  any  portion  or  all  of  a 
request  to  amend  a  record  is  not  war¬ 
ranted,  the  system  manager  shall  for¬ 
ward  the  request,  recommendations, 
and  related  information  (including  a 
copy  of  the  record  which  is  the  subject 
of  the  request)  to  the  appropriate  de¬ 
nial  authority  for  determination. 

(7)  If  the  denial  authority  determines 
that  any  portion  or  all  of  a  request  to 
amend  a  record  is  warranted,  the  denial 
authority  shall  promptly  advise  the  in¬ 
dividual,  and  direct  the  system  manager 
to  amend  the  record  accordingly.  The 
denial  authority  shall  also  direct  the 
system  manager  to  notify  previous  re¬ 
cipients  of  the  record  for  whom  a  dis¬ 
closure  accounting  has  been  made  that 
the  record  has  been  amended,  and  of 
the  substance  of  the  correction. 

(8)  If  the  denial  authority  determines 
that  any  portion  or  all  of  the  request 
to  amend  a  record  is  not  warranted  un¬ 
der  the  provisions  of  S  701.108(c),  he 
shall  promptly — 

(I)  Advise  the  Individual  of  the  re¬ 
fusal,  the  basis  thereof  (l.e.,  the  author¬ 
ity),  and  the  reasons  why  the  accuracy, 
relevance,  timeliness,  and  completeness 
of  the  disputed  record  were  sustained; 

(II)  Inform  the  Individual  that  he 
may  request  further  review  of  the  mat¬ 
ter  within  120  days,  by  writing  to  the 
designee  of  the  Secretary  of  the  Navy 
(Assistant  Secretary  of  the  Navy  (Man¬ 
power  and  Reserve  Affairs)  or  Judge 
Advocate  General) ,  as  indicated  in 
paragraph  (d)  of  the  section,  provide 
the  address  of  the  appropriate  reviewing 
official,  and  request  the  individual  to 
provide  that  official  with  the  enclosed 
copy  of  the  denial  letter  and  the  Indi¬ 
viduals  reasons  for  seeking  review  of  the 
Initial  determination  denying  the  re¬ 
quest  for  amendment;  and 


(iii)  Maintain  a  copy  of  the  file  con¬ 
taining  all  correspondence  and  all  of  the 
pertinent  information  for  forwarding, 
upon  request,  to  the  Assistant  Secretary 
of  the  Navy  (Manpower  and  Reserve  Af¬ 
fairs)  or  the  Judge  Advocate  General,  as 
appropriate.  A  copy  of  the  denial  letter 
will  be  forwarded  to  the  Chief  of  Naval 
Operations  (Op-09B1)  or  the  Com¬ 
mandant  of  the  Marine  Corps,  who  will 
maintain  it  in  a  form  for  rapid  retrieval. 

(d)  Requests  for  review  of  initial  de¬ 
terminations.  To  be  effective  for  pur¬ 
poses  of  the  provisions  of  5  U.S.C.  $  552a 
and  this  subpart,  an  individual  seeking 
review  by  the  Secretary  of  the  Navy  of 
an  initial  determination  denying  a  re¬ 
quest  to  amend  a  record  must  make  a 
written  request  for  review  which  is  re¬ 
ceived  by  the  appropriate  official  desig¬ 
nated  below  not  more  than  120  days 
following  the  date  of  transmittal  of  the 
letter  refusing  to  amend  the  record.  Ad¬ 
ditionally,  such  request  must  clearly 
state  that  it  is  a  request  or  review  of  a  re¬ 
fusal  to  amend  a  record  made  under  the 
Privacy  Act  (5  U.S.C.  §  552a)  or  this  sub¬ 
part,  and  must  either  fully  describe  the 
circumstances  of  the  request  and  Initial 
determination  denying  the  request,  or 
have  attached  a  copy  of  the  letter  deny¬ 
ing  the  request.  Requests  for  review 
should  be  addressed  to : 

(1)  The  Judge  Advocate  General 
(Code  141.),  Department  of  the  Navy, 
Washington,  DC  20370,  if  concerning 
records  other  than  performance  evalua¬ 
tions  (including  proficiency  and  conduct 
marks)  and  fitness  reports  for  military 
personnel;  or  to 

(2)  The  Assistant  Secretary  of  the 
Navy  (Manpower  and  Reserve  Affairs), 
Department  of  the  Navy,  Washington, 
DC  20350,  if  concerning  performance 
evaluations  (including  proficiency  and 
conduct  marks)  and  fitness  reports  for 
military  personnel. 

(e)  Review  authorities.  Upon  request 
under  subparagraph  (d)  of  this  section 
to  review  an  Initial  determination  deny¬ 
ing  a  request  to  amend  records  of  fitness 
reports  and  performance  evaluations,  the 
Assistant  Secretary  of  the  Navy  (Man¬ 
power  and  Reserve  Affairs)  is  designated 
to  conduct  a  review  of  the  refusal  by  the 
denial  authority. -Upon  request  made  un¬ 
der  subparagraph  (d)  of  this  section  for 
review  of  an  initial  determination  deny¬ 
ing  a  request  to  amend  records  other 
than  fitness  reports  and  performance 
evaluations,  the  Judge  Advocate  General 
is  designated  to  conduct  a  review  of  the 
refusal  of  the  denial  authority.  Each  of 
these  officials  shall  have  the  authority 
within  his  respective  area  of  cognizance 
to  make  final  determinations,  either 
granting  or  denying  requests  to  amend 
records,  to  direct  the  system  manager  to 
amend  the  records  in  accordance  with 
his  final  determination,  and  to  perform 
such  other  acts  as  may  be  required  by  the 
Secretary  of  the  Navy  in  connection  with 
requests  made  under  5  U.S.C.  §  552a  for 
review  of  initial  determinations  refusing 
to  amend  records. 

(f)  Review  of  initial  determinations. 
It  is  required  that  a  final  determination 
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be  made  on  a  request  for  review  of  an 
initial  refusal  to  amend  a  record,  and 
that  notice  of  this  determination  be  sent 
to  the  requesting  individual  within  30 
working  days  after  receipt  of  the  request 
by  the  proper  office,  unless  it  is  deter¬ 
mined  by  the  Secretary  of  the  Navy  that 
a  fair  and  equitable  review  cannot  be 
completed  within  that  time,  or  that  an 
extension  is  warranted  by  other  good 
cause.  If  an  extension  is  granted,  the  re¬ 
questing  individual  shall  be  informed  in 
writing  of  the  reason  for  the  delay,  and 
of  the  approximate  date  on  which  the 
review  is  expected  to  be  completed. 

(1)  Upon  receipt  of  a  request  for  re¬ 
view,  the  Assistant  Secretary  of  the  Navy 
(Manpower  and  Reserve  Affairs)  or  the 
Judge  Advocate  General  shall  contact 
the  initial  denial  authority  involved,  who 
shall  expeditiously  forward  the  case  files 
together  with  such  comments  and  recom¬ 
mendations  as  he  or  other  interested  of¬ 
ficials  may  deem  appropriate. 

(2)  All  naval  activities  are  enjoined 
to  provide  rapid  and  responsive  assist¬ 
ance,  as  required,  for  facilitating  correct 
and  timely  determinations  of  reviews.  Di¬ 
rect  liaison  with  appropriate  officials 
within  the  Department  of  the  Navy  and 
other  interested  Federal  agencies  is  au¬ 
thorized  at  the  discretion  of  the  deter¬ 
mining  official,  and  he  shall  be  responsi¬ 
ble  for  coordinating  with  appropriate  of¬ 
ficials  of  the  Department  of  Defense  and 
Justice  in  such  manner  as  may  be  pre¬ 
scribed  by  directive  of  the  Secretary  of 
Defense. 

(3)  In  conducting  the  review,  the  re¬ 
view  authority  should  use  the  criteria 
established  in  subparagraph  (c)  (5)  of 
this  section,  and  may,  at  his  option,  seek 
such  additional  information  as  is  deemed 
necessary  to  make  a  final  determination, 
based  upon  those  criteria. 

(g)  Refusing  amendment  upon  re¬ 
view.  If,  after  conducting  the  review, 
the  review  authority  also  refuses  to 
amend  the  record  in  accordance  with  the 
individual’s  request,  the  individual  shall 
be  notified: 

(1)  Of  the  refusal  and  reasons  there¬ 
for; 

(2)  Of  the  right  to  file  with  the  ap¬ 
propriate  system  manager  a  concise 
statement  of  the  individual’s  reasons 
for  disagreeing  with  the  decision  of  the 
agency,  and  that  such  statement  of  dis¬ 
pute  must  be  received  by  the  system 
manager  within  120  days  following  the 
date  of  the  reviewing  authority’s  final 
determination; 

(3)  Of  other  procedures  for  filing  such 
statement  of  dispute,  and  that  a  properly 
filed  statement  of  dispute  will  be  made 
available  to  anyone  to  whom  the  record  is 
subsequently  disclosed,  together  with,  if 
deemed  appropriate,  a  brief  statement 
summarizing  the  reasons  why  the  De¬ 
partment  of  the  Navy  refused  to  request 
to  amend  the  record; 

(4)  That  prior  recipients  of  the  dis¬ 
puted  records  will  be  provided  a  copy 
of  the  statement  of  dispute,  to  the  extent 
that  an  accounting  of  disclosures  is 
maintained;  and 
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(5)  Of  his  right  to  seek  judicial  re¬ 
view  of  the  reviewing  authority’s  refusal 
to  amend  a  record. 

(h)  Granting  amendment  upon  review. 
If  the  review  authority,  after  conducting 
the  review,  determines  that  the  individu¬ 
al’s  request  to  amend  a  record  is  war¬ 
ranted,  he  shall  inform  the  requesting 
individual  of  his  determination,  and  di¬ 
rect  the  system  manager  to  amend  the 
record  accordingly  and  to  inform  previ¬ 
ous  recipients  of  the  record  for  whom  a 
disclosure  accounting  has  been  made  that 
the  record  has  been  amended,  and  of  the 
substance  of  the  correction. 

(i)  Statements  of  dispute.  When  an 
individual  properly  files  a  statement  of 
dispute  under  the  provisions  of  subpara¬ 
graphs  (g)(2)  and  (g)(3)  of  this  sec¬ 
tion,  the  system  manager  shall  clearly 
annotate  the  record  so  that  the  dispute 
is  apparent  to  anyone  who  may  subse¬ 
quently  access,  use,  or  disclose  it.  The 
notation  itself  should  be  integral  to  the 
record.  For  automated  systems  of  rec¬ 
ords,  the  notation  may  consist  of  a  spe¬ 
cial  indicator  on  the  entire  record  or  on 
the  specific  part  of  the  record  in  dispute. 
The  system  manager  shall  advise  previ¬ 
ous  recipients  of  the  record  for  whom  ac¬ 
counting  disclosure  has  been  made  that 
the  record  has  been  disputed,  and  shall 
provide  a  copy  of  the  individual's  state¬ 
ment. 

(1)  The  individual's  statement  of  dis¬ 
pute  need  not  be  filed  as  an  integral  part 
of  the  record  to  which  it  pertains.  It  shall, 
however,  be  maintained  in  such  a  man¬ 
ner  as  to  permit  ready  retrieval  when¬ 
ever  the  disputed  portion  of  the  record 
is  to  be  disclosed.  When  information 
which  is  the  subject  of  a  statement  of 
dispute  is  subsequently  disclosed,  the  sys¬ 
tem  manager  shall  note  which  informa¬ 
tion  is  disputed,  and  provide  a  copy  of 
the  individual's  statement  of  dispute. 

(2)  The  system  manager  may  include 
a  brief  summary  of  the  reasons  for  not 
making  an  amendment  when  disclosing 
disputed  information.  Summaries  nor¬ 
mally  will  be  limited  to  the  reasons  stated 
to  the  individual.  While  these  summaries 
may  be  treated  as  a  part  of  the  individu¬ 
al’s  record,  they  will  not  be  subject  to  the 
amendment  procedures  of  this  section. 

§  701.109  Collection  of  personal  infor¬ 
mation  from  individuals. 

(a)  Collection  directly  from  individu¬ 
als.  Personal  information  shall  be  col¬ 
lected,  to  the  greatest  extent  practicable, 
directly  from  the  individual  when  the  in¬ 
formation  may  adversely  affect  an  indi¬ 
vidual’s  rights,  benefits,  and  privileges 
under  Federal  programs.  The  collection 
of  information  from  third  parties  shall 
be  minimized.  Exceptions  to  this  policy 
may  be  made  when  warranted.  The  fol¬ 
lowing  are  examples,  not  necessarily  ex¬ 
haustive,  of  situations  which  may  war¬ 
rant  exceptions: 

(1)  There  is  need  to  ensure  the  accu¬ 
racy  of  information  supplied  by  an  in¬ 
dividual  by  verifying  it  through  a  third 
party  (e.g.,  verifying  information  for  a 
security  clearance) ; 

(2)  The  nature  of  the  information  is 
such  that  it  can  be  obtained  only  from  a 


third  party,  such  as  supervisor’s  assess¬ 
ment  of  an  employee’s  performance  in  a 
previous  job  or  assignment;  or 

(3)  Obtaining  the  information  from 
the  individual  would  present  exceptional 
practical  difficulties  or  would  result  in 
unreasonable  cost. 

(b)  Informing  individuals  from  whom 
personal  information  requested. 

(1)  Individuals  who  are  asked  to  sup¬ 
ply  personal  information  about  them¬ 
selves  for  a  system  of  records  must  be 
advised  of : 

(1)  The  authority  (statute  or  execu¬ 
tive  order)  which  authorizes  the  solicita¬ 
tion; 

(ii)  All  major  purposes  for  which  the 
Department  of  Defense  uses  the  informa¬ 
tion  (e.g.,  pay  entitlement,  retirement 
eligibility,  or  security  clearance) ; 

(iii)  A  brief  summary  of  those  routine 
uses  to  be  made  of  the  information  as 
described  in  the  published  record  system 
notice;  and 

(iv)  Whether  disclosure  is  mandatory 
or  voluntary,  and  the  possible  con¬ 
sequences  for  failing  to  respond. 

(2)  This  statement,  which  is  referred 
to  as  a  “Privacy  Act  Statement,"  must  be 
given  regardless  of  the  medium  used  in 
requesting  the  information,  e.g.,  a  blank 
sheet,  preprinted  form  with  a  control 
number,  format,  questionnaire,  or  survey 
sheet.  It  may  be  provided  on  the  form 
used  to  collect  the  information,  or  on  a 
separate  form  or  sheet,  a  copy  of  which 
may  be  retained  by  the  individual, 

(3)  When  the  privacy  statement  is  to 
be  attached  or  provided  with  the  form, 
the  statement  will  be  assigned  the  same 
identifying  number  as  the  form  used  in 
collecting  the  information,  and  the  suffix, 
“Privacy  Act  Statement."  For  example,  a 
DD  Form  398  would  be  identified  as  “DD 
Form  398 — Privacy  Act  Statement."  For 
unnumbered  formats,  such  as  question¬ 
naires  and  survey  report  forms,  the  Pri¬ 
vacy  Act  Statement  will  bear  the  report 
control  symbol,  if  one  applies,  or  the 
OMB  number,  i.e.,  “OMB  Approval  No. 
21 — R0268,  Privacy  Act  Statement,"  The 
statement  will  be  positioned  in  such  a 
manner  that  individuals  from  whom  the 
information  about  themselves  is  being 
collected  will  be  informed  about  the  act 
before  they  begin  to  furnish  any  of  the 
information  requested. 

(4)  Determining  Privacy  Act  State¬ 
ment  requirements.  The  head  of  the  pro¬ 
ponent  activity  (i.e.,  the  initiating  or 
sponsoring  activity)  is  responsible  for 
determining  whether  a  Privacy  Act 
Statement  is  required,  and  for  ensuring 
that  it  is  prepared  and  available  as  an 
attachment  or  as  a  part  of  the  form. 

(c)  Requesting  an  individual’s  social 
security  number  (.SSN).  Department  of 
the  Navy  activities  may  not  deny  an  in¬ 
dividual  any  right,  benefit,  or  privilege 
provided  by  law  because  the  individual 
refuses  to  disclose  his  SSN,  unless  such 
disclosure  is  required  by  Federal  statute 
or,  in  the  case  of  systems  of  records  in 
existence  and  operating  before  Janu¬ 
ary  1,  1975,  where  such  disclosure  was 
required  under  statute  or  regulation 
adopted  prior  to  January  1, 1975,  to  verify 
the  identity  of  an  individual.  Executive 


Order  No.  9397  authorizes  DoD  compo¬ 
nents  to  use  the  SSN  as  a  system  of  nu¬ 
merical  identification  of  individuals. 

(d)  Informing  an  individual  when  re¬ 
questing  his  SSN.  (1)  When  an  individ¬ 
ual  is  requested  to  disclose  his  social  se¬ 
curity  number,  he  must  be  informed: 

(1)  whether  such  disclosure  is  man¬ 
datory  or  voluntary ; 

(ii)  by  what  statutory  or  other  au¬ 
thority  the  number  is  solicited;  and 

(iii)  what  uses  will  be  made  of  it. 

(2)  An  activity  may  request  an  indi¬ 
vidual’s  SSN  even  though  it  is  not  re¬ 
quired  by  Federal  statute,  or  is  not  for  a 
system  of  records  in  existence  and  oper¬ 
ating  prior  to  January  1,  1975.  However, 
the  separate  Privacy  Act  Statement  for 
the  SSN,  alone,  or  a  merged  Privacy  Act 
Statement,  covering  both  the  SSN  and 
other  items  of  personal  information, 
must  make  clear  that  disclosure  of  the 
number  is  voluntary.  If  the  individual 
refuses  to  disclose  his  SSN,  the  activity 
must  be  prepared  to  identify  the  individ¬ 
ual  by  alternate  means. 

(3)  Once  a  military  member  or  civilian 
employee  of  the  Department  of  the  Navy 
has  disclosed  his  SSN  for  purposes  of  es¬ 
tablishing  personnel,  finance,  or  medical 
records  upon  entry  into  naval  service  or 
employment,  the  SSN  becomes  his  serv¬ 
ice  or  employment  identification  number. 
It  is  not  required  that  such  an  individual 
be  informed  of  the  items  under  subpara¬ 
graph  (d)  (1)  of  this  paragraph  when  he 
is  subsequently  requested  to  provide  or 
verify  this  identification  number  in  con¬ 
nection  with  those  records. 

§  701.110  Safeguarding  personal  infor¬ 
mation. 

(a)  Legislative  requirement.  5  U.S.C. 
S  552a  requires  establishment  of  appro¬ 
priate  administrative,  technical,  and 
physical  safeguards  to  ensure  the  secur¬ 
ity  and  confidentiality  of  records,  and  to 
protect  against  any  anticipated  threats 
or  hazards  to  their  security  or  Integrity 
which  could  result  in  substantial  harm, 
embarrassment,  inconvenience,  or  un¬ 
fairness  to  any  individual  on  whom  in¬ 
formation  is  required. 

(b)  Responsibility.  At  each  location, 
and  for  each  system  of  records,  an  official 
shall  be  designated  as  having  responsi¬ 
bility  for  safeguarding  the  information 
therein.  Specific  safeguards  for  individ¬ 
ual  systems  must  be  tailored  to  the  exist¬ 
ing  circumstances,  with  consideration 
given  to  sensitivity  of  the  data,  need  for 
continuity  of  operations,  need  for  ac¬ 
curacy  and  reliability  in  operations,  gen¬ 
eral  security  of  the  area,  cost  of  safe¬ 
guards,  etc. 

(c)  Minimum  safeguards.  Ordinarily, 
personal  information  should  be  afforded 
at  least  the  protection  required  for  in¬ 
formation  designated  as  “For  Official 
Use  Only’’  under  Secretary  of  the  Navy 
Instruction  5570. 2B,  Handling  and  safe¬ 
guarding  “For  Official  Use  Only”  infor¬ 
mation  and  records. 

(d)  The  Director,  Department  of  the 
Navy  Automatic  Data  Processing  Man¬ 
agement,  is  responsible  for  determining 
and  formulating  policies  and  procedures, 
as  necessary,  to  ensure  that  ADP  systems 
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containing  personal  information  contain 
adequate  safeguards  to  protect  personal 
privacy  and  are  in  accordance  with  Sec¬ 
retary  of  the  Navy  Instruction  5206.25, 
Department  of  the  Navy  Automatic  Data 
Processing  Program,  and  Chief  of  Naval 
Operations  Instruction  5510. IE,  Depart¬ 
ment  of  the  Navy  Information  Security 
Program  Regulation. 

§  701.111  Exemptions. 

Systems  of  records  to  be  exempted 
from  certain  provisions  of  5  U.S.C.  §  552a 
are  designated  by  the  Secretary  of  the 
Navy.  Information  concerning  the  name 
of  each  designated  system,  the  provisions 
of  5  U.S.C.  §  552a  from  which  each  sys¬ 
tem  is  to  be  exempted,  and  the  reasons 
for  each  exemption  of  a  record  system, 
are  published  in  subpart  G  of  this  Part 
701.  It  is  the  policy  of  the  Department  of 
the  Navy  to  designate  a  system  of  rec¬ 
ords  or  a  portion  thereof  for  an  exemp¬ 
tion,  and  to  exercise  an  exemption  only 
where  it  has  been  determined  to  be  in 
the  best  interests  of  the  department. 

(a)  General  exemptions.  To  qualify 
for  a  general  exemption,  the  system  of 
records  must  be  maintained  by  an  activ¬ 
ity  which  performs  as  its  principal  func¬ 
tion  any  activity  pertaining  to  the  en¬ 
forcement  of  criminal  laws,  including  po¬ 
lice  efforts  to  prevent,  control,  or  reduce 
crime  or  to  apprehend  criminals,  and  the 
activities  of  prosecutors,  courts,  and  cor¬ 
rectional.  probation,  pardon,  or  parole 
authorities.  Additionally,  to  qualify,  a 
system  of  records  must  consist  of : 

(1)  Information  compiled  for  the  pur¬ 
pose  of  identifying  individual  criminal 
offenders  and  alleged  offenders,  and  con¬ 
taining  only  Identifying  data  and  nota¬ 
tions  of  arrests,  the  nature  and  disposi¬ 
tion  of  criminal  charges,  sentencing, 
confinement,  release,  and  parole  and 
probation  statutes: 

(2)  Information  compiled  for  the  pur¬ 
pose  of  a  criminal  investigation,  includ¬ 
ing  reports  of  informants  and  investiga¬ 
tors,  and  associated  with  an  identifiable 
Individual;  or 

(3)  Reports  identifiable  to  an  individ¬ 
ual,  compiled  at  any  stage  of  the  process 
of  enforcement  of  the  criminal  laws  from 
arrest  or  indictment,  through  release 
from  supervision. 

(b)  Effect  of  a  general  exemption.  The 
designation  of  a  system  of  records  for 
a  general  exemption  may  exempt  a  sys¬ 
tem  of  records  from  some  or  all  of  the 
following  provisions  of  5  U.S.C.  9  552a: 
subsections  (c)  (3)  and  (4),  (d),  (e) 
(2)  and  (3),  (e)(4)  (G)  through  (I), 
(e)(5),  (e)(8),  (f),  and  (g).  The  sub¬ 
sections  include  the  provisions  for  pro¬ 
viding  Individuals  with  notification  and 
access,  accounts  of  disclosures,  the  right 
to  request  amendment  and  to  file  state¬ 
ments  of  dispute,  and  civil  remedies 
against  the  agency  under  5  U.S.C.  9  552a. 

(c)  Specific  exemptions.  To  qualify  for 
a  specific  exemption,  a  system  of  records 
must  be  one  or  more  of  the  following: 

(1)  National  security  information 
properly  classified  in  accordance  with 
Executive  Order  No.  11852  and  Chief  of 
Naval  Operations  Instruction  5510.1E, 
Department  of  the  Navy  Information 
Security  Program  Regulation; 


(2)  Investigative  records  compiled  for 
law  enforcement  purposes,  other  than 
material  covered  under  a  general  ex¬ 
emption;  however,  an  individual  shall 
be  provided  access  to  records  which  have 
been  used  to  deny  him  a  right,  benefit, 
or  privilege,  unless  such  access  would 
reveal  a  confidential  source,  as  set  forth 
in  paragraph  (d)  of  this  section; 

(3)  Records  maintained  in  connection 
with  providing  protective  services  to  the 
President  of  the  United  States  or  other 
individuals  protected  pursuant  to  18 
U.S.C.  9  3058; 

(4)  Records  used  only  for  statistical, 
research,  or  other  evaluation  purpose, 
and  which  are  not  used  to  make  deci¬ 
sions  on  the  rights  benefits,  or  privileges 
of  individuals,  except  as  permitted  by  13 
U.S.C.  9  8; 

(5)  Investigative  records  compiled 
solely  for  the  purpose  of  determining 
suitability,  eligibility,  or  qualifications 
for  Federal  civilian  employment,  mili¬ 
tary  service,  Federal  contracts,  or  access 
to  classified  information,  but  only  to  the 
extent  that  providing  the  individual  with 
access  to  such  records  would  reveal  the 
Identity  of  a  confidential  source,  as  set 
forth  in  paragraph  (d)  of  this  section; 

(6)  Test  or  examination  material  used 
solely  to  determine  individual  qualifica¬ 
tions  for  appointment  or  promotion  in 
the  Federal  service,  the  disclosure  of 
which  would  compromise  the  objectivity 
or  fairness  of  the  testing  or  examination 
process; 

(7)  Evaluation  records  used  for  deter¬ 
mining  potential  for  promotion  in  the 
armed  services,  but  only  to  the  extent 
that  providing  an  individual  with  access 
to  such  records  would  reveal  the  identity 
of  a  confidential  source,  as  set  forth  in 
paragraph  (d)  of  this  section. 

(d)  Confidential  sources.  A  confiden¬ 
tial  source  is  a  person  who  has  furnished 
Information  to  the  Government  under 
an: 

(1)  Express  promise  that  his  identity 
would  be  held  in  confidence;  or 

(2)  Implied  promise  made  prior  to 
September  27,  1975,  that  his  identity 
would  be  held  in  confidence. 

(e)  Promises  of  confidentiality.  Ex¬ 
press  promises  of  confidentiality  shall  be 
granted  on  a  selective  basis,  when  such 
promises  are  needed  and  are  in  the  in¬ 
terest  of  the  service.  Officials  exercising 
denial  authority  shall  establish  appro¬ 
priate  procedures  and  standards  govern¬ 
ing  the  granting  of  confidentiality  for 
records  systems  within  their  cognizance. 

(f)  Classified  records.  Denial  authori¬ 
ties  having  classification  jurisdiction 
over  classified  matters  in  records  in¬ 
volved  in  requests  for  notification,  ac¬ 
cess,  or  amendment  shall  review  the 
classification  of  the  record  and  the  clear¬ 
ance  of  the  requester  before  exercising 
an  exemption  and  denying  such  requests. 
If  the  appropriate  denial  authority  lacks 
classification  jurisdiction  over  the  classi¬ 
fied  matter  in  records  which  are  the  sub¬ 
ject  of  such  requests,  immediate  coordi¬ 
nation  shall  be  established  with  the  offi¬ 
cial  having  classification  jurisdiction 
prior  to  exercising  an  exemption  and 
denying  such  requests. 


(g)  Effect  of  a  specific  exemption.  The 
designation  of  a  system  of  records  for  a 
specific  exemption  may  exempt  a  system 
of  records  from  some  or  all  of  the  follow¬ 
ing  provisions  of  5  U.S.C.  9  552a:  sub¬ 
sections  (c)(3),  (d),  (e)(1),  (e)(4)  (C) 
through  (I),  and  (f).  These  subseetions 
include  provisions  for  providing  individ¬ 
uals  with  access  and  notifieation,  ac¬ 
countings  of  disclosures,  and  the  right  to 
request  amendment  and  file  statements 
of  dispute. 

§  701.113  Contractors. 

Any  unit,  activity,  or  official  letting  a 
contract  that  involves  the  maintenance 
of  a  system  of  records  to  accomplish  a 
Department  of  the  Navy  purpose  shall 
include  in  that  contract  such  terms  as 
are  necessary  to  incorporate  the  relevant 
provisions  of  5  U.S.C.  §  552a. 

§  701.117  Rules  for  amendments  re¬ 
quests. 

5  U.S.C.  9  552a  provides  for  individuals 
to  request  amendment  of  their  personal 
records  where  the  individuals  believe  the 
records  to  be  inaccurate,  irrelevant,  un¬ 
timely,  or  incomplete.  The  following 
rules  for  amendment  requests  are  in 
effect: 

(a)  Requests  must  be  in  writing  and 
must  indicate  that  they  are  being  made 
under  the  Privacy  Act  (5  U.S.C.  §  552a) , 
this  subpart,  or  Secretary  of  the  Navy 
Instruction  5211.5.  A  request  should  con¬ 
tain  sufficient  information  to  enable  per¬ 
sonnel  to  locate  and  identify  the  partic¬ 
ular  record  which  the  requester  is  seek¬ 
ing  to  amend  (e.g.,  full  name,  social 
security  number,  date  of  birth,  etc.).  A 
request  should  also  contain  a  statement 
of  the  changes  desired  to  be  made  to  the 
record,  the  reasons  for  requesting  amend¬ 
ment,  and  any  available  information  the 
requester  can  provide  in  support  of  the 
request,  including  pertinent  documents 
and  related  records. 

(b)  Requests  for  amendment  must  be 
submitted  to  the  appropriate  system 
manager  designated  in  the  published  rec¬ 
ord  system  notices. 

(c)  A  letter  indicating  receipt  will  be 
sent  to  the  requester  within  10  working 
days  after  the  request  has  been  received 
by  the  appropriate  system  manager.  The 
letter  will  contain  details  as  to  when  the 
requester  may  expect  to  be  advised  of 
the  action  taken  on  the  request.  The  re¬ 
quester  may  also  be  asked  to  provide 
additional  information,  or  to  clarify  the 
request,  if  this  is  needed  to  process  it.  If 
the  requester  is  asked  to  provide  addi¬ 
tional  verification  of  his  identity,  this  is 
to  protect  the  privacy  of  other  individ¬ 
uals  by  ensuring  that  the  requester  is 
seeking  to  amend  his  own  records  and 
not,  inadvertently  or  intentionally,  the 
records  of  another  individual. 

(d)  A  letter  indicating  whether  or  not 
the  request  for  amendment  has  been 
granted  will  be  sent  to  the  requester  as 
soon  as  a  decision  has  been  reached  by 
the  appropriate  authority.  If  it  is  deter¬ 
mined  that  the  requested  amendments 
is  warranted,  the  requester  will  be  ad¬ 
vised  of  the  action  taken  and  of  the 
effect  of  that  action.  If  it  is  determined 
that  the  requested  amendment  is  not 
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warranted,  the  requester  will  be  advised 
of  the  reasons  for  the  refusal  and  of  the 
procedures  and  time  limits  within  which 
the  requester  can  seek  further  review  of 
the  refusal. 

§701.118  Rules  of  conduct  under  the 

privacy  act. 

(a)  Maintaining  personal  records.  It  is 
unlawful  to  maintain  systems  of  records 
about  individuals  without  prior  an¬ 
nouncement  in  the  Federal  Register. 
Anyone  who  does  is  subject  to  criminal 
penalties  up  to  $5,000.  Even  with  such 
notice,  care  shall  be  taken  to  keep  only 
such  personal  information  as  is  neces¬ 
sary  to  do  what  law  and  the  President, 
by  executive  order,  require.  The  infor¬ 
mation  is  to  be  used  only  for  the  pur¬ 
poses  described  in  the  Federal  Register. 

(b)  Disclosure.  Information  about  an 
individual  shall  not  be  disclosed  to  any 
unauthorized  individual.  Anyone  who 
makes  an  unauthorized  disclosure  on 
purpose  may  be  fined  up  to  $5,000.  Every 
member  or  employee  of  the  Department 
of  the  Navy  who  maintains  records  about 
individuals  has  an  obligation  to  do  his 
part  in  protecting  personal  information 
from  unauthorized  disclosure.  This  sub¬ 
part  describes  when  disclosures  are  au¬ 
thorized. 

(c)  Individual  access.  Every  individual, 
with  certain  exceptions  authorized  in 
this  subpart,  has  the  right  to  look  at  any 
record  the  Department  of  the  Navy  keeps 
on  him,  to  copy  it,  and  to  request  to  have 
it  corrected  if  he  considers  it  wrong.  The 
individual  attempting  to  exercise  these 
rights  shall  be  given  courteous  and  con¬ 
siderate  assistance. 

(d)  Ensuring  accuracy.  The  Depart¬ 
ment  of  the  Navy  has  an  obligation  to 
use  only  accurate,  timely,  relevant,  and 
complete  information  when  making  de¬ 
cisions  about  individuals.  Every  member, 
official,  and  employee  involved  in  keep¬ 
ing  records  on  individuals  shall  assist  in 
the  discharge  of  this  obligation. 

Subpart  G — Privacy  Act  Exemptions 

§  701.120  Purpose. 

This  subpart  contains  rules  promul¬ 
gated  by  the  Secretary  of  the  Navy,  pur¬ 
suant  to  5  U.S.C.  552a  (j)  and  (k) ,  and 
§  701.111  of  this  part,  to  exempt  certain 
systems  of  Department  of  the  Navy  rec¬ 
ords  from  specified  provisions  of  5  U.S.C. 
552a. 

§  701.121  Exemption  for  classified  rec¬ 
ords. 

All  systems  of  records  maintained  by 
the  Department  of  the  Navy  and  its  com¬ 
ponents  shall  be  exempt  from  the  re¬ 
quirements  of  5  U.S.C.  552a(d)  pursu¬ 
ant  to  5  U.S.C.  552a(k)  (1),  to  the  extent 
that  the  system  contains  any  informa¬ 
tion  properly  classified  under  Executive 
Order  11652  and  which  is  required  by 
Executive  Order  11652  to  be  kept  secret 
In  the  Interest  of  national  defense  or 
foreign  policy.  This  exemption,  which 
may  be  applicable  to  parts  of  all  systems 
of  records,  is  necessary  because  certain 
records  systems  not  otherwise  specifi¬ 
cally  designated  for  exemptions  herein 
may  contain  Isolated  items  of  informa¬ 
tion  which  have  been  properly  classified. 


§  701.122  Exemption  for  security  oper¬ 
ations. 

ID — N 000 11  JOS. 

SYSNAME — Base  Security  Incident  Sys¬ 
tem. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  652a:  (c)(3),  (c)(4), 
(d),  (e)  (2)  and  (3),  (e)(4)  (G)  through 

(I),  (e)(5),  (e)(8), (f),and  (g). 

AUTHORITY— 5  UJS.C.  552a(J)  (2) . 

REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly  in¬ 
vestigations,  with  the  orderly  administration 
of  Justice,  and  possibly  enable  suspects  to 
avoid  detection  or  apprehension.  Disclosure 
of  this  information  could  result  in  conceal¬ 
ment,  destruction,  or  fabrication  of  evidence, 
and  Jeopardize  the  safety  and  well  being  of 
informants,  witnesses  and  their  families,  and 
law  enforcement  personnel  and  their  fami¬ 
lies.  Disclosure  of  this  information  could  also 
reveal  and  render  Ineffectual  investigative 
techniques,  sources,  and  methods  used  by 
this  component,  and  could  result  in  the  in¬ 
vasion  of  privacy  of  Individuals  only  incl- 
dentially  related  to  an  investigation.  The  ex¬ 
emption  of  the  individual's  right  of  access 
to  his  records,  and  the  reasons  therefor, 
necessitate  the  exemption  of  this  system  of 
records  from  the  requirements  of  other  cited 
provisions. 

§  701.123  Exemptions  for  specific  Navy 
record  systems. 

(a)  Office  of  Civilian  Manpower  Man¬ 
agement. 

(1)  ID — N96021-02. 

SYSNAME — Supervisor's  Report  of  Poten¬ 
tial  to  Perform  and  Reference  Check  Records 
System. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  6  U.S.C.  552a:  (c)  (3),  (d),  (e)  (4) 
(G)  and  (H),and  (f). 

AUTHORITY— 5  UJS.C.  552a(k)  (5). 

REASONS — Exempted  portions  of  this  sys¬ 
tem  contain  Information  considered  relevant 
and  necessary  to  make  a  determination  as  to 
the  qualifications,  eligibility,  or  suitability 
for  Federal  employment  or  access  to  classified 
information,  and  which  was  obtained  by  pro¬ 
viding  express  or  implied  promise  to  the 
source  that  his  identity  would  not  be  revealed 
to  the  subject  of  the  record. 

(2)  ID — N96021-44B. 

SYSNAME — Civilian  Personnel  Security 
Files. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  US.C.  652a,  (c)  (3),  (d),  (e)  (4) 
(G)  through  (f) ,  and  (f). 

AUTHORITY— 6  UJ3.C.  5  552a(k)  (1),  (2), 
and  (5). 

REASONS — Exempted  portions  of  this  sys¬ 
tem  contain  Information  which  has  been 
properly  classified  under  Executive  Order 
11652  and  which  is  required  to  be  kept  secret 
in  the  interest  of  national  defense  or  foreign 
policy.  Exempted  portions  of  this  system  also 
contain  information  considered  relevant  and 
necessary  to  make  a  determination  as  to 
qualifications,  eligibility,  or  suitability  for 
Federal  employment  or  access  to  classified 
information,  and  which  was  obtained  by 
providing  an  express  or  implied  promise  to 
the  source  that  his  identity  would  not  be  re¬ 
vealed  to  the  subject  of  the  record.  Grant¬ 
ing  individuals  access  to  certain  information 
compiled  for  law  enforcement  purposes  in 
this  system  of  records  could  interfere  with 
orderly  investigations  by  disclosing  the  exist¬ 
ence  of  investigations  and  investigative 
techniques,  and  result  in  the  concealment, 
destruction,  or  fabrication  of  evidence. 


(3)  ID— N96021-44A. 

SYSNAME — Navy  Central  Clearance  Group 
(NCCG)  Records. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  6  U.S.C.  552a:  (c)(3),  (d)<  (e) 

(4)  (G)  and  (H),  and  (f). 

AUTHORITY— 5  U.S.C.  552a (k)  (1)  and 

(5) . 

REASONS — Exempted  portions  of  this  sys¬ 
tem  contain  information  considered  relevant 
and  necessary  to  make  a  determination  as 
to  qualifications,  eligibility,  or  suitability  for 
Federal  employment,  or  access  to  classified 
information,  and  which  was  obtained  by  pro¬ 
viding  an  express  or  implied  promise  to  the 
source  that  his  identity  would  not  be  re¬ 
vealed  to  the  subject  of  the  record. 

(b)  Bureau  of  Naval  Personnel 

(1)  ID — N00022.B1. 

SYSNAME — Personnel  Security  Eligibility 
Information  System. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  UJS.C.  552a:  (c)  (3),  (d),  (e)  (4) 
(G)  through  (I),  and  (f). 

AUTHORITY— 5  UJS.C.  552a (k)  (1),  (2), 

(5),  and  (7). 

REASONS — Granting  individuals  access  to 
information  collected  and  maintained  in  this 
system  of  records  could  interfere  with  or¬ 
derly  investigations:  result  in  the  disclosure 
of  classified  material;  Jeopardize  the  safety 
of  informants,  witnesses,  and  their  famUies; 
disclose  investigative  techniques:  and  result 
in  the  Invasion  of  privacy  of  individuals  only 
incidentally  related  to  an  investigation.  Ma¬ 
terial  will  be  screened  to  permit  access  to 
unclassified  information  which  will  not  dis¬ 
close  the  identity  of  sources  who  provided 
information  to  the  Government  under  an 
express  or  implied  promise  of  confidentiality. 

(2)  ID — N00022EQOPPINP06YS. 

SYSNAME — Equal  Opportunity  Informa¬ 
tion  and  Support  System. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  562a:  (C)  (3).  (d).  (e)  (4) 
(G)  through  (I),  and  (f>. 

AUTHORITY— 5  UJS.C.  552a(k)  (1)  and 

(5) . 

REASONS — Granting  access  to  information 
in  this  system  of  records  could  result  in  the 
disclosure  of  classified  material,  or  reveal  the 
identity  of  a  source  who  furnished  informa¬ 
tion  to  the  Government  under  an  express 
or  implied  promise  of  confidentiality.  Mate¬ 
rial  will  be  screened  to  permit  access  to  un¬ 
classified  material  and  to  information  which 
will  not  disclose  the  identity  of  a  confidential 
source. 

(3)  ID— N000220FFPROMSYS. 

SYSNAME — Officer  Promotion  System. 

EXEMPTION — Portions  of  this  system  of 

records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552a:  (c)(3),  (d).  (e)(1), 
(e)(4)  (G)  through  (I),  and  (f). 

AUTHORITY— 5  U.S.C.  652a(k)  (1),  (5), 

(6) .  and  (7). 

REASONS — Granting  individuals  access  to 
this  system  of  records  could  result  in  the  dis¬ 
closure  of  classified  material,  or  the  identi¬ 
fication  of  sources  who  provided  information 
to  the  Government  under  an  express  or  im¬ 
plied  promise  of  confidentiality.  Material  will 
be  screened  to  permit  access  to  unclassified 
material  and  to  Information  which  does  not 
disclose  the  identity  of  a  confidential  source. 

(4)  ID— N00022.82. 

SYSNAME — Navy  Personnel  Evaluation 
System. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  UJ3.C.  552a:  (c)(3).  (d),  (e)(1). 
(e)(4)  (Q)  through  (I),  and  (f). 

AUTHORITY— 6  UJS.C.  552a<k>  (1),  (3), 

(5).  and  (7). 

REASONS — Granting  individuals  access  to 
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information  collected  and  maintained  in  this 
system  could  result  in  disclosure  of  classified 
material,  Jeopardize  the  safety  of  Informants 
and  witnesses  and  their  families,  and  result 
in  the  invasion  of  privacy  of  individuals  only 
incidentally  related  to  an  Investigation.  Ma¬ 
terial  will  be  screened  to  permit  access  to 
unclassified  material  and  to  information 
which  will  not  disclose  the  sources  who  pro¬ 
vided  the  information  under  an  express  or 
implied  promise  of  confidentiality. 

(5)  ID— N00022PERSRECSYS. 

SYSNAME — Navy  Personnel  Records  Sys¬ 
tem. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  pro¬ 
visions  of  6  U.8.C.  652a:  (c)(3),  (d),  (e)(1), 
(e)(4)  (O)  through  (I),  and  (f). 

AUTHORITY— 5  U.S.C.  652a(k)  (1)  and 

(6). 

REASONS — Granting  individuals  access  to 
certain  portions  of  the  Information  collected 
and  maintained  in  this  system  of  records 
could  result  in  the  unauthorized  disclosure 
of  classified  material.  Material  will  be  screen¬ 
ed  in  order  to  provide  access  to  unclassified 
Information  which  does  not  disclose  the 
identity  of  a  source  who  provided  informa¬ 
tion  under  an  express  or  implied  promise  of 
confidentiality. 

(c)  Navy  Recruiting  Command 

(1)  ID— N66716.20SAS. 

SYSNAME — Officer  Selection  and  Appoint¬ 
ment  System. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
section*  of  5  U.S.C.  552a:  (c)(3),  (d), (e)(1), 
(e)  (4)  (G)  through  (I),  and  (f) . 

AUTHORITY— 6  U.S.C.  552a (k)  (1),  (6), 
(6),  and  (7). 

REASONS — Granting  individuals  access  to 
portions  of  this  system  of  records  could  re¬ 
sult  in  the  disclosure  of  classified  material, 
or  the  identification  of  sources  who  provided 
information  to  the  Government  under  an  ex¬ 
press  or  implied  promise  of  confidentiality. 
Material  will  be  screened  to  permit  access  to 
unclassified  material  or  to  information  which 
does  not  disclose  the  Identity  of  a  confidential 
source. 

(2)  ID— N66715.3RESS. 

SYSNAME — Recruiting  Enlisted  Selection 
System. 

EXEMPTION — Portions  of  this  system  otf 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  652a:  (c)  (3),  (d),  (e)  (1), 
(e)  (4)  (O)  through  (I),  and  (f). 

AUTHORITY— 5  U.S.C.  662a(k)  (1),  (5), 
(6) ,  and  (7) . 

REASON — Granting  individuals  access  to 
portions  of  this  system  of  records  could  re¬ 
sult  in  the  unauthorized  disclosure  of  classi¬ 
fied  material  or  the  identification  of  sources 
who  provided  information  to  the  Govern¬ 
ment  under  an  express  or  implied  promise  of 
confidentiality.  Material  will  be  screened  to 
permit  access  to  unclassified  material  or  to 
information  which  does  not  disclose  the 
identity  of  a  confidential  source. 

(d)  Naval  Security  Group  Command 

(1)  n>— N00069NSGHG12PAC01. 

SYSNAME — Naval  Security  Group  Per¬ 
sonnel  Security/ Access  Piles. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  UB.C.  562a:  (c)  (3),  (d),  (e)  (1), 
(e)(4)  (G)  through  (I),  and  (f). 

AUTHORITY— 5  U.S.C.  552a(k)  (1)  and 

(6). 

REASONS — Exempted  portions  of  this  sys¬ 
tem  contain  Information  which  has  been 
properly  classified  under  Executive  Order 
11652  and  which  is  required  to  be  kept 
secret  in  the  Interest  of  national  defense 
or  foreign  policy.  Exempted  portions  of  this 
system  also  contain  Information  considered 


relevant  and  necessary  to  make  a  determina¬ 
tion  as  to  qualification,  eliglblity,  or  suit¬ 
ability  for  access  to  classified  special  intelli¬ 
gence  Information,  and  which  was  obtained 
by  providing  an  express  or  Implied  promise 
to  the  source  that  his  identity  would  not  be 
revealed  to  the  subject  of  the  record. 

(e)  Naval  Investigative  Service. 

(1)  ID— N63285. 

SYSNAME — NIS  Investigative  Files  System. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  6  U.S.C.  652a  (c)(3),  (d),  (e)(1), 
(e)(4)  (G)  through  (I),  and  (f). 

AUTHORITY— 5  U.S.C.  552a (k)  (1)  through 

(5). 

REASONS — The  release  of  disclosure  ac¬ 
countings  would  permit  the  subject  of  an 
investigation  to  obtain  valuable  information 
concerning  the  nature  of  that  Investigation, 
and  the  information  contained,  or  the  iden¬ 
tity  of  witnesses  or  informants,  and  would 
therefore  present  a  serious  Impediment  to 
law  enforcement.  In  addition,  disclosure  of 
the  accounting  would  amount  to  notice  to 
the  individual  of  the  existence  of  a  record. 
Access  to  the  records  contained  in  this  system 
would  Inform  the  subject  of  the  existence  of 
material  compiled  for  law  enforcement  pur¬ 
poses,  the  premature  release  of  which  could 
prevent  the  successful  completion  of  inves¬ 
tigation,  and  lead  to  the  improper  influencing 
of  witnesses,  the  destruction  of  records,  or 
the  fabrication  of  testimony. 

Exempt  portions  of  this  system  also  con¬ 
tain  information  which  has  been  properly 
classified  under  Executive  Order  11652  and 
which  is  required  to  be  kept  secret  in  the 
Interest  of  national  defense  or  foreign  policy. 

Exempt  portions  of  this  system  also  con¬ 
tain  Information  considered  relevant  and 
necessary  to  make  a  determination  as  to 
qualifications,  eligibility,  or  suitability  for 
Federal  civilian  employment,  military  serv¬ 
ice,  Federal  contracts,  or  access  to  classi¬ 
fied  information,  and  was  obtained  by  pro¬ 
viding  an  express  or  implied  assurance  to 
the  source  that  his  identity  would  not  be 
revealed  to  the  subject  of  the  record.  The 
notice  for  this  system  of  records  published 
in  the  Federal  Register  sets  forth  the  basic 
statutory  or  related  authority  for  mainte¬ 
nance  of  the  system.  However,  in  the  course 
of  criminal  investigations,  cases,  and  mat¬ 
ters,  the  Naval  Investigative  Service  will  oc¬ 
casionally  obtain  information  concerning 
actual  or  potential  violations  of  law  that 
are  not  strictly  within  its  statutory  or  other 
authority,  or  may  compile  Information  In 
the  course  of  an  investigation  which  may 
not  be  relevant  to  a  specific  prosecution.  In 
the  interest  of  effective  law  enforcement,  it 
is  necessary  to  retain  such  Information  in 
this  system  of  records,  since  it  can  aid  in 
establishing  patterns  of  criminal  activity 
and  can  provide  valuable  leads  for  Federal 
and  other  law  enforcement  agencies. 

The  categories  of  sources  of  records  in  this 
system  have  been  published  in  the  Federal 
Register  in  broad  generic  terms. 

The  identity  of  specific  sources,  however, 
must  be  withheld  in  order  to  protect  the 
confidentiality  of  the  sources  of  criminal 
and  other  law  enforcement  Information.  This 
exemption  is  further  necessary  to  protect 
the  privacy  and  physical  safety  of  witnesses 
and  Informants.  This  system  of  records  is 
exempted  from  procedures  for  notice  to  an 
individual  as  to  the  existence  of  records  per¬ 
taining  to  him  dealing  with  an  actual  or 
potential  civil  or  regulatory  Investigation, 
because  such  notice  to  an  Individual  would 
be  detrimental  to  the  successful  conduct 
and/or  completion  of  an  Investigation,  pend¬ 
ing  or  future.  Mere  notice  of  the  fact  of  an 
investigation  could  inform  the  subject  or 
others  that  their  activities  are  under,  or  may 
become  the  subject  of,  an  investigation,  and 
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could  enable  the  subjects  to  avoid  detection, 
to  influence  witnesses  improperly,  to  destroy 
records,  or  to  fabricate  testimony. 

(2)  ID— N63285. 

SYSNAME — NIS  Investigative  Files  System. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  6  UJ3.C.  552a:  (c)(3),  (c)(4),  (d), 
(e)  (2)  and  (3),  (e)(4)  (G)  through  (I), 
(e)  (5),  (e)  (8).  (f)  and  (g). 

REASONS— Granting  individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  Interfere  with  orderly 
investigations,  with  the  orderly  administra¬ 
tion  of  Justice,  and  possibly  enable  suspects 
to  avoid  detection  or  apprehension.  Disclos¬ 
ure  of  this  information  could  result  in  the 
concealment,  destruction,  or  fabrication  of 
evidence  and  Jeopardize  the  safety  and  well 
being  of  Informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  Information 
could  also  reveal  and  render  Ineffectual  in¬ 
vestigative  techniques,  sources,  and  meth¬ 
ods  used  by  this  component,  and  could  re¬ 
sult  in  the  Invasion  of  the  privacy  of  in¬ 
dividuals  only  Incidentally  related  to  an 
investigation.  The  exemption  of  the  individ¬ 
ual's  right  of  access  to  his  records  and  the 
reasons  therefor,  necessitate  the  exemption 
of  this  system  of  records  from  the  require¬ 
ments  of  the  other  cited  provisions. 

(f)  Naval  Intelligence  Command. 

(1)  IO— N00015.L1000. 

SYSNAME — Naval  Intelligence  Manage- 
ment  Information  System  (MIMIS). 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  6  U.S.C.  552a  (c)  (3),  (d),  (e)  (4) 
(G)  and  (H),  and  (f). 

AUTHORITY— 5  U.S.C.  652a(k)(l). 

REASONS — Exempted  portions  of  this  sys¬ 
tem  contained  information  which  has  been 
properly  classified  under  Executive  Order 
11652,  and  which  is  required  to  be  kept 
secret  in  the  interest  of  national  defense  or 
foreign  policy. 

(2)  ID — N00016.0NI53-1A. 

SYSNAME — Status  of  Downed  Naval  Avia¬ 
tion  Personnel,  Southeast  Asia  Operations. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  652a:  (c)(3),  (d),  (e)(1), 
(e)  (4)  )G)  through  (I)  and  (f). 

AUTHORITY— 5  U.S.C.  652a(k)(l). 

REASONS — Exempted  portions  of  this  sys¬ 
tem  contain  information  which  has  been 
properly  classified  under  Executive  Order 
1 1652,  and  which  is  required  to  be  kept  secret 
in  the  Interest  of  national  defense  or  foreign 
policy. 

(3)  ID — N00016.00K1. 

SYSNAME — Special  Intelligence  Personnel 
Access  File. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552a:  (c)  (3),  (d),  (e)(1), 
(e)(4)  (G)  through  (I),  and  (f). 

AUTHORITY— 5  U.S.C.  552a(k)  (1)  and 
(5). 

REASONS — Exempted  portions  of  this  sys¬ 
tem  contain  Information  which  has  been 
properly  classified  under  Executive  Order 
11652,  and  which  is  required  to  be  kept 
secret  in  the  interest  of  national  defense  or 
foreign  policy.  Exempted  portions  of  this 
system  also  contain  information  considered 
relevant  and  necessary  to  make  a  determina¬ 
tion  as  to  qualifications,  eligibility,  or  suit¬ 
ability  for  access  to  classified  Information, 
and  was  obtained  by  providing  an  express  or 
implied  promise  to  the  source  that  his  iden¬ 
tity  would  not  be  revealed  to  the  subject  of 
the  record. 

<g)  Fleet  Aviation  Specialized  Opera¬ 
tional  Training  Group,  Pacific  Fleet. 
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ID — N09191  POW  DEBRIEFS. 

SYSNAME— Summary  Debriefs  of  Former 
Prisoners  of  War. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552a:  (c)  (3),  (d),  (e)  (1), 
(e)(4)  (G)  through  (I),  and  (f). 
AUTHORITY— 5  U.S.C.  552a(k)(l). 
REASONS — Exempted  portions  of  this  sys¬ 
tem  contain  information  which  has  been 
properly  classified  under  Executive  Order 
11652,  and  which  is  required  to  be  kept  secret 
in  the  interest  of  national  defense  or  foreign 
policy. 

(h)  Naval  Resale  System  Office 

ID— N00250  IR-PERS-RECORD. 

SYSNAME — Industrial  Relations  Personnel 
Records. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552a:  (d),  (e)(4)  (G) 
and  (H) ,  and  (f ) . 

AUTHORITY— 5  U.S.C.  552a  (k)  (5)  and 
00(6). 

REASONS — Exempted  portions  of  this  sys¬ 
tem  contain  information  considered  relevant 
and  necessary  to  make  a  determination  as  to 
the  qualifications,  eligibility,  or  suitability 
for  Federal  employment,  and  which  was  ob¬ 
tained  by  providing  an  express  or  implied 
promise  to  the  source  that  his  Identity  would 
not  be  revealed  to  the  subject  of  the  record. 
Exempted  portions  of  this  system  also  con¬ 
tain  tests  or  examinations  material  used 
solely  to  determine  Individual  qualifications 
for  appointment  or  promotion  in  the  Federal 
service,  the  disclosure  of  which,  would  com¬ 
promise  the  objectivity  or  fairness  of  the 
fairness  of  the  testing  or  examination 
progress. 

(i)  Naval  Material  Command. 

ID— N00037  CNM  (MAT  0901). 

SYSNAME — Investigatory  (Fraud  System) . 
EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552(a);  (c)(3)(d),  (e) 
(1),  (e)(4)  (G)  through  (I),  and  f. 

AUTHORITY— 5  U.S.C.  552a(k)  (1),  (2), 
and  (5). 

REASONS — Exempt  portions  of  this  sys¬ 
tem  of  records  contain  Information  which 
has  been  properly  classified  under  Executive 
Order  11652,  and  which  is  required  to  be 
kept  secret  in  the  interest  of  national 
defense  or  foreign  policy.  Exempted  portions 
of  this  system  also  contain  information  con¬ 
sidered  relevant  and  necessary  to  make  a 
determination  as  to  qualifications,  eligibil¬ 
ity,  or  suitability  for  federal  employment 
and  federal  contracts,  and  which  was  ob¬ 
tained  by  providing  an  express  or  implied 
promise  to  the  source  that  his  identity  would 
not  be  revealed  to  the  subject  of  the  record. 
Granting  individuals  access  to  certain  in¬ 
formation  collected  and  maintained  by  this 
oomponent  relating  to  the  enforcement  of 
criminal  laws  could  Interfere  with  orderly  in¬ 
vestigations  with  the  orderly  administration 
of  Justice,  and  possibly  enable  suspects  to 
avoid  detection  or  apprehension.  Disclosure 
at  this  information  could  result  in  the  con¬ 
cealment,  destruction  or  fabrication  of  evi¬ 
dence,  and  could  also  reveal  and  render  in¬ 
effectual  investigative  techniques,  sources, 
Mid  methods  used  by  this  component. 

(j)  Navy  Exchange. 

ID— N00129  07. 

SYSNAME — Navy  Exchange  Security  In¬ 
vestigation. 

EXEMPTION — Portidns  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552a;  (c)  (3) ,  (d) ,  (e)  (1) , 
(e)  (4)  (O)  through  (I),  and  (f). 
AUTHORITY— 5  U.S.C.  562(E)  (2) . 
REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by 


these  activities  relating  to  the  enforcement 
of  criminal  laws  could  interfere  with  orderly 
investigations,  with  the  orderly  administra¬ 
tion  of  Justice,  and  possibly  enable  suspects 
to  avoid  detection  or  apprehension.  Disclosure 
of  this  information  could  result  in  the  con¬ 
cealment,  destruction  or  fabrication  of  evi¬ 
dence,  and  could  also  reveal  and  render  in¬ 
effectual  investigative  techniques,  sources, 
and  methods  used  by  these  activities. 

§  701.121  Exemptions  for  specific  Ma¬ 
rine  Corps  record  systems. 

(a)  ID— MMN00001. 

SYSNAME — Deserter  Inquiry  File. 
EXEMPTION— Portions  of  this  system  of 

records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552a:  (c)  (3),  (c)  (4),  (d), 
(e)(2),  (e)(3),  (e)(4)  (G)  through  (I). 

(e)(5),  (e)(8),  (f),  and  (g). 

AUTHORITY— 5  U.S.C.  552a(J)  (2). 
REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly  in¬ 
vestigations,  with  the  orderly  administration 
of  Justice,  and  possibly  enable  suspects  to 
avoid  detection  or  apprehension.  Disclosure 
of  this  Information  could  result  in  the  con¬ 
cealment,  destruction,  or  fabrication  of  evi¬ 
dence,  and  Jeopardize  the  safety  and  well  be¬ 
ing  of  informants,  witnesses  and  their  fam¬ 
ilies,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  information 
could  also  reveal  and  render  ineffectual  in¬ 
vestigative  techniques,  sources,  and  methods 
used  by  this  component,  and  could  result  in 
the  invasion  of  the  privacy  of  individuals 
only  incidentally  related  to  an  Investigation. 
The  exemption  of  the  individual’s  right  of 
access  to  his  records,  and  the  reasons  there¬ 
for,  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  from  the 
other  cited  provisions. 

(b)  ID— MMN0024. 

SYSNAME — Absentee  Processing  Files. 
EXEMPTION — Portions  of  this  system  of 
records  are  exempted  from  the  following 
subsections  of  5  U.S.C.  552a  (c)(3),  (c)(4), 
(d),  (e)(2)  and  (3).  (e)(4)  (G)  through 
(I),  (e)(5).  (e)(8).  (f),  and  (g). 
AUTHORITY— 6  U.S.C.  662a( J)  (2) . 
REASONS — Granting  individuals  access  to 
information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 
criminal  laws  could  interfere  with  orderly 
investigations,  with  the  orderly  administra¬ 
tion  of  Justice,  and  possibly  enable  suspects 
to  avoid  detection  or  apprehension.  Disclo¬ 
sure  of  this  Information  could  result  in  the 
concealment,  destruction,  or  fabrication  of 
evidence,  and  Jeopardize  the  safety  and  well 
being  of  informants,  witnesses  and  their  fam¬ 
ilies,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  informa¬ 
tion  could  also  reveal  and  render  Ineffectual 
investigative  techniques,  sources,  and  meth¬ 
ods  used  by  this  component,  and  could  re¬ 
sult  in  the  Invasion  of  the  privacy  of  in¬ 
dividual’s  only  incidentally  related  to  an 
investigation.  The  exemption  of  the  individ¬ 
ual’s  right  of  access  to  his  records,  and  the 
reasons  therefor,  necessitate  the  exemption 
of  this  system  of  records  from  the  require¬ 
ments  of  the  other  cited  provisions. 

(c)  ID— MMN00018. 

SYSNAME — Base  Security  Incident  Report¬ 
ing  System. 

Exemption — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552a:  (c)(3),  (c)(4), 
(d),  (e)  (2)  and  (3),  (e)(4)  (G)  through 
(I),  (e)(5),  (e)(8),  (f).  and  (g). 
AUTHORITY— 5  US.C.  552a(J)(2). 
REASONS — Granting  individuals  access  to 
Information  collected  and  maintained  by  this 
component  relating  to  the  enforcement  of 


criminal  laws  could  Interfere  with  orderly  in¬ 
vestigations,  with  the  orderly  administration 
of  Justice,  and  possibly  enable  suspects  to 
avoid  detection  or  apprehension.  Disclosure 
of  tills  information  could  result  in  the  con¬ 
cealment,  destruction,  or  fabrication  of  evi¬ 
dence,  and  Jeopardize  the  safety  and  well- 
being  of  informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  information 
could  also  reveal  and  render  Ineffectual  in¬ 
vestigative  techniques,  sources,  and  methods 
used  by  this  component,  and  could  result 
in  the  Invasion  of  the  privacy  of  individuals 
only  incidentally  related  to  an  Investigation. 
The  exemption  of  the  individual's  right  of 
access  to  his  records,  and  the  reasons  there¬ 
for,  necessitate  the  exemption  of  this  system 
of  records  from  the  requirements  of  the  other 
cited  provisions. 

(d)  ID— MMN00019. 

SYSNAME — Drug/ Alcohol  Abuse  Reporting 
Program. 

EXEMPTION— Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U.S.C.  552a:  (c)  (3),  (d),  (e)  (1), 
(e)  (4)  (G)  through  (I) ,  and  (f) . 

AUTHORITY— 5  U.S.C.  552a(k)  (2) . 

REASONS — Granting  individuals  access 
to  portions  of  this  system  of  records  relating 
to  the  enforcement  of  criminal  laws  could 
interfere  with  orderly  investigations  and 
with  the  orderly  administration  of  Justice. 
Disclosure  of  this  information  could  result 
in  the  concealment,  alteration  or  destruction 
of  evidence,  and  Jeopardize  the  safety  and 
well-being  of  Informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  information 
could  also  reveal  and  render  ineffectual  in¬ 
vestigative  techniques,  sources,  and  methods 
used  by  this  component,  and  could  result  in 
the  invasion  of  the  privacy  of  individuals 
only  incidentally  related  to  an  Investigation. 
The  exemption  of  the  individual’s  right  of 
access  to  portions  of  the  records  in  this  rec¬ 
ord  system,  and  the  reasons  therefor,  ne¬ 
cessitate  the  exemption  of  this  system  of 
records  from  the  requirements  of  the  other 
cited  provisions. 

(e)  ID— MMN00022. 

SYSNAME — Vehicle  Control  System. 

EXEMPTION — Portions  of  this  system  of 
records  are  exempt  from  the  following  sub¬ 
sections  of  5  U5.C.  552a:  (e)(3),  (c)(4), 
(d),  (e)(2),  (e)(3),  (e)(4)  (G)  through 
(I),  (e)(5),  (e)  (6),  (f),and  (g). 

AUTHORITY— 5  U.S.C.  552c(J)  (2). 

REASONS — Granting  individuals  access 
to  portions  of  records  maintained  by  these 
activities  relating  to  the  enforcement  of 
criminal  laws  could  Interfere  with  orderly 
Investigations,  with  the  orderly  administra¬ 
tion  of  Justice,  and  possibly  enable  suspects 
to  avoid  detection  or  apprehension.  Disclo¬ 
sure  of  this  information  could  result  in  the 
concealment,  destruction  or  fabrication  of 
evidence,  and  Jeopardize  the  safety  and  well¬ 
being  of  informants,  witnesses  and  their 
families,  and  law  enforcement  personnel  and 
their  families.  Disclosure  of  this  information 
could  also  reveal  and  render  Ineffectual  in¬ 
vestigative  techniques,  sources,  and  methods 
used  by  this  component,  and  could  result  in 
the  invasion  of  the  privacy  of  individuals 
only  incidentally  related  to  an  investigation. 
The  exemption  of  the  individual’s  right  of 
access  to  portions  of  these  records,  and  the 
reasons  therefor,  necessitate  the  exemption 
of  this  system  of  records  from  the  require¬ 
ments  of  the  other  cited  provisions. 

(f)  ID-MMN00023. 

SYSNAME — Prisoner  Records. 

EXEMPTION— Portions  of  this  system  of 

records  are  exempt  from  the  following  sub- 
•sections  of  5  U.S.C.  557a  (c)(3),  (c)(4),  (d). 
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(e)(2),  (e)(3),  (e)(4)  (O)  through  (I), 
(e)(6),  (e)(6).  (f).  and  (g). 

AUTHORITY— 6  UJ3.C.  652a(J)  (2). 

REASONS — Granting  individuals  access  to 
portions  of  these  records  pertaining  to  or 
consisting  of,  but  not  limited  to,  disciplinary 
reports,  criminal  investigations,  and  related 
statements  of  witnesses,  and  such  other  re¬ 
lated  matter  in  conjunction  with  the  en¬ 
forcement  of  criminal  laws,  could  interfere 
with  orderly  investigations,  with  the  orderly 
administration  of  justice,  and  possibly  enable 
suspects  to  avoid  detection  or  apprehension. 
Disclosure  of  this  information  could  result 
in  the  concealment,  destruction  or  fabrica¬ 
tion  of  evidence,  and  Jeopardize  the  safety 
and  well-being  of  informants,  witnesses  and 
their  families,  and  law  enforcement  person¬ 
nel  and  their  families.  Disclosure  of  this  in¬ 
formation  oould  also  reveal  and  render  inef¬ 
fectual  investigative  techniques,  sources,  and 
methods  used  by  these  components  and 
oould  result  in  the  invasion  of  the  privacy 
of  Individuals  only  incidentally  related  to 
an  Investigation.  The  exemption  of  the  in¬ 
dividual's  right  of  access  to  portions  of  these 
reoords,  and  the  reasons  therefor,  necessitate 
the  exemption  of  this  system  of  records  from 
the  requirements  of  the  other  cited  provi¬ 
sions. 

William  O.  Miller, 

Rear  Admiral,  JAGC,  VS.  Navy, 
Acting  Judge  Advocate  General. 

Maurice  W.  Roche, 
Director.  Correspondence  and 
Directives  OASD  ( Comptroller ) . 

August  18,  1975. 

[FR  Doc.75-22210  Filed  8-25-75:8:45  am] 

National  Security  Agency 
[  32  CFR  Part  299a] 

PRIVACY  ACT  SYSTEMS  OF  RECORDS 

Disclosures  and  Amendment  Procedures 
and  Specific  Exemptions 

Notice  Is  hereby  given  In  accordance 
with  the  administrative  procedure  pro¬ 
visions  In  5  UJS.C.  553,  that  pursuant  to 
5  U.S.C.  552a,  sections  (f)  and  (k),  the 
Director  of  the  National  Security  Agency 
proposes  the  following  rules  to  provide 
for  disclosure  and  amendment  with  re¬ 
spect  to  records  on  individuals  contained 
in  systems  of  records  for  which  notice 
has  been  published  pursuant  to  5  U.S.C. 
552a,  subsection  (e)  (4)  and  to  designate 
such  systems  of  records  for  exemption. 
Notices  of  systems  of  records  are  being 
published  separately.  When  available,  a 
cross-reference  will  be  provided  for  each 
system  and  exemption  notice. 

Any  person  Interested  in  the  proce¬ 
dures  and  exemptions  proposed  herein 
may  participate  In  this  proposed  rule- 
making  by  submitting  written  comments 
on  the  proposed  exemptions  to  the  Di¬ 
rector,  National  Security  Agency,  Fort 
George  G.  Meade,  Maryland  20755,  At¬ 
tention:  Information  Officer,  on  or  before 
12  September  1975. 

PART  299a— PRIVACY  ACT  SYSTEMS  OF 

RECORDS— DISCLOSURE  AND  AMEND¬ 
MENT  PROCEDURES— SPECIFIC  EX¬ 
EMPTIONS 

Sec. 

299&.1  Purpose  and  scope. 

299&J2  Definitions. 


299a. 3  Procedures  for  requests  concerning 
individual  records  In  a  system  of 
reoords. 

299a .4  Times,  places  and  procedures  for 

disclosure. 

299a .5  Medical  or  psychological  records. 

299a.6  Parents  or  legal  guardians  acting 
on  behalf  of  minor  applicants  and 
employees. 

299a  7  Procedures  for  amendment. 

299a.8  Appeal  determination. 

299a.9  Fees. 

299a.l0  Specific  exemptions. 

Authority:  5  U.S.C.  552a,  the  Privacy  Act 
of  1974;  5  U.S.C.  552,  the  Freedom  of  Informa¬ 
tion  Act  as  amended  by  Pub.  L.  93-502;  Pub. 
L.  86-36,  Pub.  L.  88-290  and  18  U.S.C.  798. 

§  299a.  1  Purpose  and  scope. 

(a)  The  purpose  of  this  rule  Is  to 
comply  with  and  Implement  title  5  U.S.C. 
552a,  sections  (f)  and  (k),  hereinafter 
Identified  as  the  Privacy  Act.  It  estab¬ 
lishes  the  procedures  by  which  an  In¬ 
dividual  may  be  notified  whether  a  sys¬ 
tem  of  records  contains  information  per¬ 
taining  to  the  individual;  defines  times, 
places  and  requirements  for  identifica¬ 
tion  of  the  individual  requesting  records, 
for  disclosure  of  requested  records  where 
appropriate;  special  handling  for  medical 
and  psychological  records;  for  amend¬ 
ment  of  records;  appeal  of  denials  of  re¬ 
quests  for  amendment;  and  provides  a 
schedule  of  fees  to  be  charged  for  making 
copies  of  requested  records.  In  addition, 
this  rule  contains  the  exemptions  pro¬ 
mulgated  by  the  Director,  NSA,  pursuant 
to  5  U.S.C.  552a(k),  to  exempt  Agency 
systems  of  records  from  subsections  (c) 
(3);  (d) ;  (e)(D;  (e)(4)(G)  (H),  (I); 
and  (f )  of  section  552a. 

(b)  The  procedures  established  and 
exemptions  claimed  apply  to  systems  of 
records  for  which  notice  has  been  pub¬ 
lished  in  the  Federal  Register  pursuant 
to  the  Privacy  Act.  Requests  from  indi¬ 
viduals  for  records  pertaining  to  them¬ 
selves  will  be  processed  in  accordance 
with  these  procedures  and  consistent 
with  the  exemptions  claimed.  Requests 
for  records  which  do  not  specify  the 
statute  pursuant  to  which  they  are  made 
but  which  may  be  reasonably  construed 
to  be  requests  by  an  individual  for  rec¬ 
ords  pertaining  to  that  individual  will 
also  be  processed  in  accordance  with 
these  procedures  and  consistent  with 
exemptions  claimed.  To  the  extent  ap¬ 
propriate,  these  procedures  apply  to 
records  maintained  by  this  Agency  pur¬ 
suant  to  system  of  records  notices  pub¬ 
lished  by  the  Civil  Service  Commission. 
The  primary  category  of  records  affected 
by  a  Commission  notice  is  that  main¬ 
tained  in  conjunction  with  the  CSC  sys¬ 
tem  identified  as  “CSC -Retirement  Life 
Insurance  and  Health  Benefits  Records 
System.” 

§  299a.2  Definitions. 

(a)  Access  to  the  NSA  headquarters. 
Means  current  and  continuing  daily  ac¬ 
cess  to  those  facilities  making  up  the 
NSA  headquarters. 

(b)  Individual.  Means  a  natural  person 
who  is  a  citizen  of  the  United  States  or 


an  alien  lawfully  admitted  for  perma¬ 
nent  residence. 

(c)  Request.  Means  a  request  in  writ¬ 
ing  for  records  pertaining  to  the  re¬ 
quester  contained  in  a  system  of  records 
and  made  pursuant  to  the  Privacy  Act 
or  if  no  statute  is  identified  considered 
by  the  Agency  to  be  made  pursuant  to 
that  Act. 

(d)  System,  of  records,  means  a  group¬ 
ing  of  records  maintained  by  the  Agen¬ 
cy  for  which  notice  has  been  published 
in  the  Federal  Register  pursuant  to  sec¬ 
tion  552a(e)  (4)  of  title  5  U.S.C. 

§  299m. 3  Procedures  for  requests  con¬ 
cerning  individual  records  in  a  sys¬ 
tem  of  records. 

(a) (1)  Notification.  Any  individual 
may  be  notified  in  response  to  a  request 
if  any  system  of  records  contains 
a  record  pertaining  to  the  requester 
by  sending  a  request  addressed  to; 
Information  Officer,  National  Security 
Agency,  Fort  George  G.  Meade,  Mary¬ 
land  20755.  Such  request  shall  be  in 
writing,  shall  be  identified  on  the 
envelope  and  the  request  as  a  “Pri¬ 
vacy  Act  Request,”  shall  designate  the 
system  or  systems  of  records  using  the 
names  of  the  systems  as  published  in  the 
system  notices,  shall  contain  the  full 
name,  present  address,  date  of  birth,  so¬ 
cial  security  number  and  dates  of  affilia¬ 
tion  or  contact  with  NSA/CSS  of  the 
requester  and  shall  be  signed  in  full  by 
the  requester. 

(2)  A  request  pertaining  to  records 
concerning  the  requester  which  does  not 
specify  the  Act  pursuant  to  which  the 
request  is  made  shall  be  processed  as  a 
Privacy  Act  request.  A  request  which  does 
not  designate  the  system  or  systems  of 
records  to  be  searched  shall  be  processed 
by  checking  the  following  systems  of 
records:  Applicants;  Personnel;  Health, 
Medical  and  Safety. 

(b)  (1)  Identification.  Any  individual 
currently  not  authorized  access  to  the 
National  Security  Agency  headquarters 
who  requests  disclosure  of  records  shall 
provide  the  following  information  with 
the  written  request  for  disclosure:  full 
name,  present  address,  date  of  birth,  so¬ 
cial  security  number,  and  date  of  first 
affiliation  or  contact  with  NSA/CSS  and 
date  of  last  affiliation  or  contact  with 
NSA/CSS. 

(2)  Any  individual  currently  author¬ 
ized  access  to  the  National  Security 
Agency  headquarters  shall  provide  the 
following  information  with  the  request 
for  notification:  full  name,  present  or¬ 
ganizational  assignment,  date  of  birth, 
social  security  number. 

(3)  Such  request  shall  be  treated  as  a 
certification  of  the  requester  that  the 
requester  is  the  individual  named.  Indi¬ 
viduals  should  be  aware  that  the  Privacy 
Act  provides  criminal  penalties  for  any 
person  who  knowingly  and  willfully  re¬ 
quests  or  obtains  any  record  concerning 
an  individual  under  false  pretenses. 

§  299a.  4  Times,  places  and  procedures 
for  disclosure. 

(a)  Individual  not  currently  affiliated 
with  NSA— 
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(1)  Request  procedure.  Any  individual 
currently  not  authorized  access  to  the 
National  Security  Agency  headquarters 
shall  make  the  request  for  notification 
in  writing  and  shall  include  the  required 
identifying  data.  Upon  verification  of  the 
existence  in  systems  of  records  of  records 
pertaining  to  the  requester,  a  copy  of  the 
records  located  shall  be  mailed  to  the  re¬ 
quester  subject  to  appropriate  specific 
exemptions,  applicable  Public  Laws,  spe¬ 
cial  procedures  pertaining  to  medical 
records,  including  psychological  records, 
and  the  exclusion  for  information  com¬ 
piled  in  reasonable  anticipation  of  a  civil 
action  or  proceeding.  If  the  request  can¬ 
not  be  processed  within  ten  working  days 
from  the  time  of  receipt  of  the  request, 
an  acknowledgement  of  receipt  of  the  re¬ 
quest  will  be  sent  to  the  requester. 

(2)  Appointment  of  other  individual. 
If  a  requester  wishes  another  individual 
to  obtain  the  requested  records  on  his 
behalf,  the  requester  shall  provide  a  writ¬ 
ten,  signed,  notarized  statement  appoint¬ 
ing  that  individual  as  his  representative, 
certifying  that  the  individual  appointed 
may  have  access  to  the  records  of  the  re¬ 
quester  and  that  such  access  shall  not 
constitute  an  invasion  of  the  privacy  of 
the  requester  nor  a  violation  of  his  rights 
under  the  Privacy  Act  of  1974. 

(b)  Individual  currently  affiliated  with 
NSA — (1)  Request  procedure.  Any  indi¬ 
vidual  currently  authorized  access  to  the 
National  Security  Agency  headquarters 
may  make  the  request  for  notification  to 
the  appropriate  official  delegated  respon¬ 
sibility  for  a  system  of  records  pursuant 
to  internal  agency  regulations  pertaining 
to  the  Privacy  Act  of  1974.  In  the  alter¬ 
native,  such  individual  may  direct  the  re¬ 
quest  to  the  NSA  Information  Officer  in 
writing  in  the  same  form  and  including 
the  data  required  in  paragraph  (a)  (1) 
of  this  section.  In  the  case  of  any  denial 
of  notification  by  officials  delegated  re¬ 
sponsibility  for  a  system  the  request  shall 
be  referred  to  the  NSA  Information  Offi¬ 
cer  for  review. 

(2)  Appointment  of  other  individual.  If 
the  requester  makes  a  request  pursuant 
to  this  paragraph  and  wishes  to  desig¬ 
nate  another  individual  to  accompany 
him,  the  same  procedures  as  provided  in 
paragraph  (a)  (2)  of  this  section.  If  the 
individual  appointed  is  currently  author¬ 
ized  access  to  the  National  Security 
Agency  headquarters,  he  may  accom¬ 
pany  the  requester.  If  the  individual  ap¬ 
pointed  is  not  currently  authorized  ac¬ 
cess,  a  copy  of  the  records  located  may 
be  mailed  to  the  appointed  individual 
subject  to  appropriate  specific  exemp¬ 
tions,  applicable  Public  Laws,  special  pro¬ 
cedures  pertaining  to  medical  records  in¬ 
cluding  psychological  records,  and  the 
exclusion  for  information  compiled  in 
reasonable  anticipation  of  a  civil  action 
or  proceeding. 

§  299a. 5  Medical  or  psychological  rec¬ 
ords. 

If  the  request  includes  records  of  a 
medical  or  psychological  nature,  and  if 
an  Agency  doctor  makes  the  determina¬ 
tion  that  the  records  requested  contain 
information  which  would  have  an  ad¬ 


verse  effect  upon  the  requester,  the  re¬ 
quester  win  be  advised  to  appoint  a  medi¬ 
cal  doctor  in  the  appropriate  discipline 
to  receive  the  information.  The  appoint¬ 
ment  of  the  doctor  shall  be  in  the  same 
form  as  that  Indicated  in  §  299a.4(a)  (2) 
above  and  shall  Include  a  certification 
that  the  doctor  appointed  is  authorized 
to  practice  the  appropriate  specialty  by 
virtue  of  a  license  to  practice  same  in 
the  state  which  granted  the  license. 

§  299a. 6  Parents  or  legal  guardians  act¬ 
ing  on  behalf  of  minor  applicants 
and  employees. 

Parents  or  Legal  Guardians  acting  on 
behalf  of  minors  who  request  records 
concerning  NSA/CSS  applicants  or  em¬ 
ployees  who  are  minors  shall  be  subject 
to  the  same  requirements  contained  In 
§  299a.4(a)  (1)  Appointment  of  Other 
Individuals',  including  the  requirement 
for  written  authorization.  Requests  by 
parents  or  legal  guardians  acting  on  be¬ 
half  of  minors  will  be  processed  in  the 
same  manner  and  in  accordance  with  the 
procedures  established  herein  for  indi¬ 
viduals  not  currently  authorized  access 
to  the  NSA  headquarters. 

§  299a. 7  Procedures  for  amendment, 

(a)  Request  procedure.  Any  request  for 
amendment  of  a  record  or  records  con¬ 
tained  in  a  system  of  records  shall  be  in 
writing  addressed  to  the  Information 
Officer,  National  Security  Agency,  Port 
George  G.  Meade,  Md.  20755,  Attention: 
Privacy  Act  Amendment,  and  shall  con¬ 
tain  sufficient  details  concerning  the  re¬ 
quested  amendment,  justification  for  the 
amendment,  and  a  copy  of  the  record  (s) 
to  be  amended  or  sufficient  identifying 
data  concerning  the  affected  record  (s) 
to  permit  its  timely  retrieval.  Such  re¬ 
quests  may  not  be  used  to  accomplish  ac¬ 
tions  for  which  other  procedures  have 
been  established  such  as  grievances,  per¬ 
formance  appraisal  protests,  etc.  In  such 
cases  the  requester  will  be  advised  of  the 
appropriate  procedures  for  such  actions. 

(b)  Initial  determination.  The  NSA 
Information  Officer  may  make  an  initial 
determination  concerning  the  requested 
amendment  within  ten  working  days  or 
shall  acknowledge  receipt  of  the  amend¬ 
ment  request  within  that  period  if  a  de¬ 
termination  cannot  be  completed.  The 
determination  shall  advise  the  requester 
of  action  taken  to  make  the  requested 
amendment  or  inform  the  requester  of 
the  rejection  of  the  request,  the  reason(s) 
for  the  rejection  and  the  procedures  es¬ 
tablished  by  the  Agency  for  review  of 
rejected  amendment  requests. 

(c)  Request  on  appeal.  A  requester  may 
appeal  the  rejection  by  the  NSA  Infor¬ 
mation  Officer  of  a  request  for  amend¬ 
ment  to  the  Executive  for  Staff  Serv¬ 
ices.  Such  appeal  shall  be  in  writing,  ad¬ 
dressed  to  the  Executive  for  Staff  Serv¬ 
ices,  National  Security  Agency,  Port 
George  G.  Meade,  Md.  20755,  Attention; 
Privacy  Act  Amendment  Appeal. 

§  299a. 8  Appeal  determination. 

The  Executive  for  Staff  Services  shall 
acknowledge  receipt  of  the  appeal  within 
ten  working  days.  A  determination  con¬ 
cerning  the  appeal  shall  be  provided  to 


the  requester  within  30  working  days,  un¬ 
less  the  Director,  National  Security 
Agency,  extends  the  period  for  good 
cause.  The  Executive  for  Staff  Services 
shall  advise  the  requester  of  the  action 
taken  to  make  the  requested  amendment 
or  inform  the  requester  of  the  rejection 
of  the  appeal,  the  right  to  submit  for 
incorporation  in  the  file  containing  the 
disputed  record(s)  a  concise  statement 
of  disagreement,  and  notify  the  requester 
of  the  right  of  judicial  review  of  the 
denial  pursuant  to  subsection  (g)  (1)  (A) 
of  5  U.S.C.  552a. 

§  299a.9  Fees. 

A  fee  may  be  charged  for  the  repro¬ 
duction  of  copies  of  any  requested  rec¬ 
ords,  provided  one  copy  is  made  avail¬ 
able  without  charge  where  access  is  lim¬ 
ited  to  mail  service  only.  Fees  shall  be 
charged  in  accordance  with  The  Uniform 
Schedule  of  Fees  established  by  the  De¬ 
partment  of  Defense  pursuant  to  Pub. 
L.  93-502. 

§  299a. 10  Specific  exemptions. 

(a)  (1)  The  following  National  Secu¬ 
rity  Agency  systems  of  records,  pub¬ 
lished  in  the  Federal  Register,  are  spe¬ 
cifically  exempted  from  the  provisions 
of  5  U.S.C.  552a,  subsections  (c)  (3) , 

(d),  (e)(1),  (e)(4)(G),  (e)(4)(H),  (e) 
(4)  (I)  and  (f )  pursuant  to  subsection 
(k)  of  Section  552a  to  the  extent  that 
each  system  contains  individual  records 
or  files  within  the  category  or  categories 
provided  by  subsection  (k).  Notice  is 
hereby  given  that  individual  records  and 
files  within  each  NSA  system  of  records 
may  be  subject  to  specific  provisions  of 
Pub.  L.  86-36,  Pub.  L.  88-290  and  Title 
18  U.S.C.  798  and  other  laws  limiting 
access  to  certain  types  of  information  or 
application  of  laws  to  certain  categories 
of  information. 

(2)  In  addition,  those  records  main¬ 
tained  pursuant  to  notice  of  systems  of 
records  published  by  the  CSC  are  ex¬ 
empted  pursuant  to  Title  5  U.S.C.  552a 
(k)  (1)  to  the  extent  that  they  contain 
classified  information  in  order  to  protect 
such  information  from  unauthorized  dis¬ 
closure.  Such  records  may  also  be  sub¬ 
ject  to  other  specific  exemptions  pursu¬ 
ant  to  rules  promulgated  by  the  CSC. 

(b)  Systems  of  records  subject  to  spe¬ 
cific  exemptions — (1)  System  name. 
NSA/CSS  Access,  Authority  and  Release 
of  Information  File. 

Exemption:  This  system  of  records  is  ex¬ 
empted  from  the  sections  of  title  6  U.S.C. 
552a  cited  in  paragraph  299a.l0(a)  and  is 
subject  to  the  limitations  noted  in  that 
paragraph. 

Authority:  5  U.S.C.  552a(k)(l),  (k)(5). 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  ail  subsections  cited  pursuant 
to  exemption  (k)(l)  to  protect  from  unau¬ 
thorized  disclosure  classified  information 
which  may  be  contained  in  records  and  files 
making  up  the  system.  The  exemption  does 
not  limit  access  to  that  portion  of  the  rec¬ 
ords  in  the  system  which  are  not  classified 
or  otherwise  protected  from  unauthorized 
disclosure. 

This  system  of  records  is  also  exempted 
from  all  subsections  cited  pursuant  to  ex¬ 
emption  (k)  (5)  to  protect  the  identity  of 
confidential  sources  of  information  consti¬ 
tuting  investigatory  material  compiled  solely 
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for  the  purpose  of  determining  access  to 
classified  information.  The  exemption  does 
not  limit  access  to  that  portion  of  the  rec¬ 
ords  In  the  system  which  are  not  exempted, 
not  otherwise  protected  from  unauthorized 
disclosure,  and  which  would  not  undermine 
the  Integrity  of  the  controlled  access  system. 

(2)  System  name.  NSA/CSS  appli¬ 
cants. 

Exemption:  This  system  of  records  is  ex¬ 
empted  from  the  sections  of  title  5  U.S.C. 
552a  cited  in  paragraph  299a.  10(a)  and  is 
subject  to  the  limitations  noted  in  that 
paragraph. 

Authority:  5  U.S.C.  552a(k)(l),  (k)(5). 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)(l)  to  protect  from  unau¬ 
thorized  disclosure  classified  information 
which  may  be  contained  in  records  and  files 
making  up  the  system.  The  exemption  does 
not  limit  access  to  that  portion  of  the  rec¬ 
ords  in  the  system  which  are  not  classified 
or  otherwise  protected  from  unauthorized 
disclosure. 

This  system  of  records  is  also  exempted 
from  all  subsections  cited  pursuant  to  exemp¬ 
tion  (k)  (6)  to  protect  the  identity  of  con¬ 
fidential  sources  of  information  constitut¬ 
ing  investigatory  material  compiled  solely 
for  the  purposes  of  determining  suitability; 
eligibility;  qualifications  for  Federal  civilian 
employment;  Federal  contracts;  or  access  to 
classified  Information  which  may  be  con¬ 
tained  in  records  and  files  making  up  the 
system.  The  exemption  does  not  limit  access 
to  that  portion  of  the  records  In  the  system 
which  are  not  subject  to  this  exemption,  nor 
otherwise  protected  from  unauthorized  dis¬ 
closure. 

(3)  System  name.  NSA/CSS  Cor¬ 
respondence,  Cases,  Complaints,  Visitors, 
Requests. 

Exemption:  This  system  of  records  is  ex¬ 
empted  from  the  sections  of  title  5  U.S.C. 
552a  cited  in  paragraph  299a.l0(a)  and  1s 
subject  to  the  limitations  noted  in  that 
paragraph. 

Authority:  5  U.S.C.  552a(k)(l),  (k)(2), 
(k)(4),  (k)(5).  ~ 

Reasons:  This  system  of  records  Is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)(l)  to  protect  from  unau¬ 
thorized  disclosure  classified  information 
which  may  be  contained  in  records  and  files 
making  up  the  system.  The  exemption  does 
not  limit  access  to  that  portion  of  the 
records  In  the  system  which  are  not  classi¬ 
fied  or  otherwise  protected  from  unauthor¬ 
ized  disclosure. 

This  system  of  records  is  exempted  from 
all  subsections  cited  pursuant  to  exemption 
(k)  (2)  to  protect  from  unauthorized  dis¬ 
closure  individual  records  and  files  which 
constitute  lnvestlgory  material  compiled  for 
law  enforcement  purposes  pursuant  to  a  law¬ 
ful  national  security  intelligence  investiga¬ 
tion  and  maintain  the  integrity  of  the  per¬ 
sonnel  security  system  required  by  Public 
Law  88-290.  The  exemption  does  not  limit 
access  to  that  portion  of  the  records  in  the 
system  which  are  not  investigatory  material 
which  are  not  exempted  or  otherwise  pro¬ 
tected  from  unauthorized  disclosure. 

This  system  is  exempted  from  all  subsec¬ 
tions  cited  pursuant  to  exemption  (k)  (4) 
where  individual  records  and  files  are  main¬ 
tained  and  used  solely  for  statistical  records 
in  accordance  with  statutory  requirements 
to  insure  compliance  with  those  require¬ 
ments  with  a  minimum  of  administrative 
burden  and  expense. 

This  system  is  exempted  from  all  subsec¬ 
tions  cited  pursuant  to  exemption  (k)  (5) 
to  protect  the  Identity  of  confidential  sources 
of  information  constituting  investigatory 


material  compiled  solely  for  the  purposes  of 
determining  suitability;  eligibility;  qualifica¬ 
tions  for  Federal  civilian  employment,  Fed¬ 
eral  contracts;  or  access  to  classified  infor¬ 
mation  which  may  be  contained  in  records 
and  files  making  up  the  system.  The  exemp¬ 
tion  does  not  limit  access  to  that  portion  of 
the  records  in  the  system  which  are  not  sub¬ 
ject  to  this  exemption  or  otherwise  protected 
from  unauthorized  disclosure. 

(4)  System  name:  NSA/CSS  Crypto¬ 
logic  Reserve  Mobilization  Designee  List. 

Exemption:  This  system  of  records  is  ex¬ 
empted  from  the  sections  of  title  5  U.S.C. 
552a  cited  in  paragraph  299a.l0(a)  and  is 
subject  to  the  limitations  noted  in  that 
paragraph. 

Authority:  5  U.S.C.  552a(k)(l),  (k)(5). 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)  (1)  to  prevent  the  unau¬ 
thorized  disclosure  of  classified  information 
concerning  anticipated  personnel  assign¬ 
ments  to  sensitive  cryptologic  positions  dur¬ 
ing  periods  of  national  emergency  or  war 
requiring  reserve  mobilization. 

This  system  of  records  is  also  exempted 
from  all  subsections  cited  pursuant  to  ex¬ 
emption  (k)  (5)  to  protect  the  identity  of 
confidential  sources  of  information  consti¬ 
tuting  investigatory  material  compiled  solely 
for  the  purpose  of  determining  suitability, 
eligibility  or  qualifications  for  designation 
for  mobilization  to  fill  a  sensitive  cryptologic 
position  or  access  to  classified  material  as  a 
result  of  designation  for  mobilization. 

<5)  System  name.  NSA/CSS  Equal  Em¬ 
ployment  Opportunity  Data. 

Exemption:  nils  system  of  records  is  ex¬ 
empted  from  the  sections  of  title  5  U.S.C. 
552a  cited  in  paragraph  299a.l0(a)  and  is 
subject  to  the  limitations  noted  in  that  para¬ 
graph. 

Authority:  5  U.S.C.  552a(k)(l),  (k)(2),  (k) 
(4). 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)(l)  to  protect  from  unau¬ 
thorized  disclosure  classified  information 
which  may  be  contained  in  records  and  files 
making  up  the  system.  The  exemption  does 
not  limit  access  to  that  portion  of  the  records 
in  the  system  which  are  not  classified  or 
otherwise  protected  from  unauthorized  dis¬ 
closure. 

This  system  of  reoords  is  exempted  from 
all  subsections  cited  pursuant  to  exemption 
(k)  (4)  to  protect  the  integrity  of  those  sta¬ 
tistical  records  compiled  for  Equal  Employ¬ 
ment  Opportunity  purposes. 

This  system  of  records  is  also  exempted 
from  all  subsections  cited  pursuant  to  ex¬ 
emption  (k)  (2)  to  the  extent  that  individual 
records  and  files  are  related  to  investigations 
to  enforce  the  provisions  of  Pub.  L.  92-261 
and  consistent  with  the  provisions  of  that 
statute  with  respect  to  individual  access  to 
such  records.  The  purpose  of  the  exemption 
is  to  protect  the  integrity  of  investigations 
conducted  pursuant  to  Pub.  L.  92-261. 

(6)  System  name.  NSA  CSS  Health, 
Medical  and  Safety  Files. 

Exemption:  This  system  of  records  is  ex¬ 
empted  from  sections  of  title  5  U.S.C.  552a 
cited  in  paragraph  299a.l0(a)  and  is  sub¬ 
ject  to  the  statutory  limitations  noted  in 
that  paragraph. 

Authority:  6  U.S.C.  562a(k)(l),  (k)(5), 
<k)<«). 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)(l)  to  protect  from  unau¬ 
thorized  disclosure  classified  information 
which  may  be  contained  in  records  and  files 
making  up  the  system.  The  exemption  does 


not  limit  access  to  that  portion  of  the  rec¬ 
ords  in  the  system  which  are  not  classified 
or  otherwise  protected  from  unauthorized 
disclosure. 

This  system  of  reoords  is  exempted  from 
all  subsections  cited  pursuant  to  exemption 
(k)  (5)  to  protect  the  identity  of  confidential 
souroes  of  information  constituting  investi¬ 
gatory  material  compiled  solely  for  the  pur¬ 
pose  of  determining  suitability,  eligibility, 
or  qualifications  for  Federal  civilian  employ¬ 
ment,  Federal  contracts  or  access  to  classi¬ 
fied  information.  The  exemption  does  not 
limit  access  to  that  portion  of  the  records 
in  the  system  which  are  not  exempted  or 
otherwise  protected  from  unauthorized  dis¬ 
closure. 

This  system  of  records  is  also  exempted 
from  all  subsections  cited  pursuant  to  ex¬ 
emption  (k)  (6)  to  protect  those  testing  or 
examination  materials  used  solely  to  deter¬ 
mine  Individual  qualifications  for  employ¬ 
ment  in  the  Federal  service  the  disclosure 
of  which  would  compromise  the  objectivity 
or  fairness  of  the  testing  or  examination 
process. 

(7)  System  name.  NSA/CSS  Motor 
Vehicles  and  Carpools. 

Exemption:  This  system  of  records  is  ex¬ 
empted  from  the  sections  of  title  5  UJS.C. 
552a  cited  In  paragraph  299a. 10(a)  and  is 
subject  to  the  statutory  limitations  noted  in 
that  paragraph. 

Authority:  5  U.S.C.  552a(k)(l). 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)(l)  to  protect  from  unau¬ 
thorized  disclosure  any  and  all  classified 
information  which  may  be  oontained  in  rec¬ 
ords  and  files  making  up  the  system.  The 
exemption  does  not  limit  access  to  that  por¬ 
tion  of  the  records  in  the  system  which  are 
not  classified  or  otherwise  protected  from 
unauthorized  disclosure. 

(8)  System  name.  NSA/CSS  Payroll 
and  Claims. 

Exemption:  This  system  of  records  is  ex¬ 
empted  from  the  sections  of  title  5  U.S.C. 
552a  cited  in  paragraph  299a.l0(a)  and  is 
subject  to  the  statutory  limitations  noted  in 
that  paragraph. 

Authority:  5  U.S.C.  552a(k)(l),  (k)(2). 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)  (1)  to  protect  from  unau¬ 
thorized  disclosure  classified  Information 
which  may  be  contained  in  records  and  files 
making  up  this  system.  The  exemption  does 
not  limit  access  to  that  portion  of  the  records 
in  the  system  which  are  not  classified  or 
otherwise  protected  from  unauthorized 
disclosure. 

This  system  of  records  is  also  exempted 
from  all  subsections  cited  pursuant  to  ex¬ 
emption  (k)  (2)  to  protect  investigatory  ma¬ 
terials  related  to  the  enforcement  of  laws 
with  respect  to  claims  against  the  Govern¬ 
ment.  The  exemption  does  not  limit  access 
to  that  portion  of  the  records  In  the  system 
not  related  to  investigations  of  claims  or 
otherwise  protected  from  unauthorized  dis¬ 
closure. 

(9)  System  name.  NSA/CSS  Personnel 
File. 

Exemption:  This  system  of  records  Is  ex¬ 
empted  from  the  sections  of  title  5  U.8.C. 
552a  cited  in  paragraph  299a.l0(a)  and  Is 
subject  to  the  statutory  limitations  noted 
in  that  paragraph. 

Authority:  5  U.S.C.  552a(k)(l),  (k)(5), 

00(6) 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  an  subsections  cited  pursuant 
to  exemption  (k)  (1)  to  protect  from  unauth¬ 
orized  disclosure  classified  information  which 
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may  be  contained  in  records  and  flies  making 
up  the  system.  The  exemption  does  not  limit 
access  to  that  portion  of  the  records  in  the 
system  which  are  not  classified  or  otherwise 
protected  from  unauthorized  disclosure. 

This  system  of  records  is  exempted  from  all 
subsections  cited  pursuant  to  exemption 
(k)  (5)  to  protect  the  identity  of  confiden¬ 
tial  sources  of  information  constituting  in¬ 
vestigatory  material  compiled  solely  for  the 
purpose  of  determining  suitability,  eligibility, 
or  qualifications  for  Federal  civilian  employ¬ 
ment,  Federal  contracts  or  access  to  classified 
information.  The  exemption  does  not  limit 
access  to  that  portion  of  the  records  in 
the  system  which  are  not  exempted  or  other¬ 
wise  protected  from  unauthorized  disclosure. 

This  system  of  records  is  also  exempted 
from  all  subsections  cited  pursuant  to  ex¬ 
emption  (k)(6)  to  protect  those  testing  or 
examination  materials  used  solely  to  deter¬ 
mine  Individual  qualifications  for  employ¬ 
ment  in  the  Federal  service  the  disclosure  of 
which  would  compromise  the  objectivity  or 
fairness  of  the  testing  or  examination  proc¬ 
ess. 

(10)  System,  name.  NSA/CSS  Person¬ 
nel  Security  Pile. 

Exemption:  This  system  of  records  is 
exempted  from  the  sections  of  title  5  U.S.C. 
552a  cited  in  paragraph  299a. 10(a)  and  is 
subject  to  the  limitations  noted  in  that 
paragraph. 

Authority:  5  U.S.C.  552a(k)  (1),  (k)  (2) 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)(l)  to  protect  from  unau¬ 
thorized  disclosure  classified  Information 
which  may  be  contained  in  records  and  files 
making  up  the  system.  The  exemption  does 
not  limit  access  to  that  portion  of  the  rec¬ 
ords  in  the  system  which  are  not  classified 
or  otherwise  protected  from  unauthorized 
disclosure. 

This  system  of  records  is  exempted  from 
all  subsections  cited  pursuant  to  exemption 
(k)  (2)  to  protect  investigatory  materials 
compiled  for  purposes  of  enforcement  of 
Pub.  L.  88-290  and  title  18  U.S.C.  798  as 
well  as  other  appropriate  criminal  and  civil 
laws  related  to  the  protection  of  sensitive 
cryptologic  information.  Both  statutes  cited 
require  the  Director,  NSA,  to  observe  special 
procedures  and  standards  in  permitting  ac¬ 
cess  to  sensitive  cryptologic  information  and 
provide  statutory  authority  to  act  when 
those  standards  are  breached.  The  materials 
contained  in  this  system  are  of  an  investi¬ 
gatory  nature,  are  maintained  on  a  continu¬ 
ing  basis  and  are  used  to  insure  compliance 
with  and  enforcement  of  the  cited  statutes. 

This  system  of  records  is  exempted  from 
all  subsections  cited  pursuant  to  exemption 
(k)  (5)  to  protect  the  identity  of  confiden¬ 
tial  sources  of  information  constituting  in¬ 
vestigatory  material  compiled  solely  for  the 
purpose  of  determining  suitability,  eligi¬ 
bility,  or  qualifications  for  Federal  civilian 
employment.  Federal  contracts  or  access  to 
classified  information.  The  exemption  does 
not  limit  access  to  that  portion  of  the  rec¬ 
ords  in  the  system  which  are  not  exempted 
or  otherwise  protected  from  unauthorized 
disclosure. 

(11)  System  name:  NSA/CSS  Time, 
Attendance  and  Absence. 

Exemption:  This  system  of  records  Is 
exempted  from  the  sections  of  title  5  U.S.C. 
652a  cited  in  paragraph  299a. 10(a)  and  Is 
subject  to  the  limitations  noted  In  that  para¬ 
graph. 

Authority:  5  US.C.  562a(k)  (1). 

Reasons:  This  system  of  records  is  ex¬ 
empted  from  all  subsections  cited  pursuant 
to  exemption  (k)(l)  to  protect  from  unau¬ 


thorized  disclosure  classified  information 
which  may  be  contained  in  records  and  files 
making  up  the  system.  The  exemption  does 
not  limit  access  to  that  portion  of  the  rec¬ 
ords  In  the  system  which  are  not  classi¬ 
fied  or  otherwise  protected  from  unau¬ 
thorized  disclosure. 

(12)  System  name.  NSA/CSS  Training. 

Exemption:  This  system  of  records  Is  • 
exempted  from  the  sections  of  title  5  U.S.C. 
552a  cited  in  paragraph  299a. 10(a)  and  is 
subject  to  the  limitations  noted  In  that 
paragraph. 

Authority:  5  U.S.C.  552a(k)(l),  (k)  (5) . 
(k)(6). 

Reasons:  This  system  of  records  Is 
exempted  from  all  subsections  cited  pursuant 
to  exemption  (k)  (1)  to  protect  from  unau¬ 
thorized  disclosure  classified  Information 
which  may  be  contained  in  records  and  files 
making  up  the  system.  The  exemption  does 
not  limit  access  to  that  portion  of  the  records 
in  the  system  which  are  not  classified  or 
otherwise  protected  from  unauthorized  dis¬ 
closure. 

This  system  of  records  is  exempted  from 
all  subsections  cited  pursuant  to  exemption 
(k)  (5)  to  protect  the  identity  of  con¬ 
fidential  sources  of  information  constituting 
investigatory  material  compiled  solely  for 
the  purpose  of  determining  suitability, 
eligibility,  or  qualifications  for  Federal 
civilian  employment.  Federal  contracts  or 
access  to  classified  Information.  The  exemp¬ 
tion  does  not  limit  access  to  that  portion 
of  the  records  in  the  system  which  are  not 
exempted  or  otherwise  protected  from  unau¬ 
thorized  disclosure. 

This  system  of  records  is  also  exempted 
from  all  subsections  cited  pursuant  to  exemp¬ 
tion  (k)  (6)  to  protect  those  testing  or 
examination  materials  used  solely  to 
determine  individual  qualifications  for  em¬ 
ployment  in  the  Federal  service  the  dis¬ 
closure  of  which  would  compromise  the 
objectivity  or  fairness  of  the  testing  or 
examination  process. 

Dated:  August  8, 1975  . 

Lew  Allen,  Jr., 
Lieutenant  General,  USAF, 
Director,  N S A/ Chief ,  CSS. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives,  OSD  A  ( Comptroller ) . 

[FR  Doc.75-22208  Filed  8-25-75:8:45  am] 

Office  of  the  Joint  Chiefs  of  Staff 
[  32  CFR  Part  286c  ] 

PRIVACY  ACT  OF  1974 
Notice  of  Proposed  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (P.L.  93-579,  88  Stat.  1896,  5  U.S.C. 
552a)  which  requires  each  federal  agency 
that  maintains  any  system  of  records  as 
defined  in  the  statute  to  promulgate  rules 
pursuant  to  the  provisions  of  the  Act. 

Notice  is  hereby  given  that  the  Office 
of  the  Joint  Chiefs  of  Staff  proposes  to 
add  Part  286c  to  implement  the  provis¬ 
ions  of  the  Privacy  Act  of  1974. 

§  286c.  1  Source  of  regulations. 

The  Office  of  the  Joint  Chiefs  of  Staff 
is  governed  by  the  Privacy  Act  implemen¬ 
tation  regulations  of  the  Office  of  the 
Secretary  of  Defense,  32  CFR  Part  286b. 

As  Indicated,  the  Office  of  the  Joint 
Chiefs  of  Staff  implementation  of  the 


Privacy  Act  is  provided  for  in  32  CFR 
Part  286b. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives,  OASD  ( Comptroller ) . 

August  15,  1975. 

IFR  Doc.75-22213  Filed  8-25-75:8:45  am] 


Office  of  the  Secretary 
[  32  CFR  Part  286a  ] 

PERSONAL  PRIVACY  AND  RIGHTS  OF  IN¬ 
DIVIDUALS  REGARDING  THEIR  PER¬ 
SONAL  RECORDS 

Notice  of  Proposed  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (Pub.  L.  93-579;  88  Stat.  1896,.  5 
U.S.C.  552a)  which  requires  each  Fed¬ 
eral  Agency  that  maintains  any  sys¬ 
tems  of  records  as  defined  in  the  statute 
to  promulgate  rules  pursuant  to  the 
provisions  of  the  Act. 

Notice  is  hereby  given  that  the  Depart¬ 
ment  of  Defense  proposes  to  add  a  new 
Part  286a  to  implement  the  Privacy  Act. 

Any  person  interested  in  the  rules  pro¬ 
posed  herein  may  participate  in  this 
rulemaking  by  submitting  written  data, 
views,  or  arguments  to  the  Defense  Pri¬ 
vacy  Board,  Room  1A670,  Pentagon 
Building,  Washington,  D.C.  20301. 

All  comments  received  before  Septem¬ 
ber  27,  1975,  will  be  considered.  The  pro¬ 
posed  Part  286a  reads  as  follows: 


PART  286a— PERSONAL  PRIVACY  AND 
RIGHTS  OF  INDIVIDUALS  REGARDING 
THEIR  PERSONAL  RECORDS 

Sec. 

286a.l  Purpose. 

286a.2  Applicability  and  scope. 

286a.3  Policy. 

286a.4  Authority  and  responsibilities. 

286a.5  Annual  report. 

286a.6  Definitions. 

286a.7  Access  by  the  individual. 

286a. 8  Disclosure  to  others. 

286a.9  Collection  of  personal  information 
from  individuals. 

286a.l0  Exemptions 
286a.ll  System  of  records. 

286a. 12  Instructions  for  preparation  of  rec¬ 
ord  system  notices. 

286a.l3  Effective  date  and  implementation. 

Authority  :  Privacy  Act  of  1974,  Pub.  L. 
93-579,  88  Stat.  1896  (5  U.S.C.  552a). 

§  286a.  1  Purpose. 

This  Part  Implements  5  U.S.C.  552a, 
P.L.  93-579  by  prescribing: 

(a)  The  procedures  whereby  an  indi¬ 
vidual  can  be  notified  in  response  to  his 
request  if  any  system  of  records  named 
by  the  individual  contains  a  record  per¬ 
taining  to  him. 

(b)  The  requirements  for  verifying  the 
identity  of  an  individual  who  requests  his 
record  or  information  pertaining  to  him 
before  the  record  or  information  shall  be 
made  available  to  him. 

(c)  The  procedures  for  granting  access 
to  an  individual  upon  his  request  of  his 
record  or  information  pertaining  to  him. 

(d)  The  procedures  for  reviewing  a  re¬ 
quest  from  an  individual  concerning  the 
amendment  of  any  record  or  information 
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pertaining  to  him,  for  making  a  determi¬ 
nation  on  the  request,  and  for  an  appeal 
of  an  Initial  adverse  determination. 

(e)  The  procedures  and  policies 
governing  the  collection,  safeguarding, 
maintenance,  public  notice,  use  and  dis¬ 
semination  of  personal  information. 

(f)  The  conditions  under  which  dis¬ 
closure  of  personal  information  may  be 
made  and  procedures  for  exempting  sys¬ 
tems  of  records  from  certain  require¬ 
ments  of  the  Privacy  Act  of  1974. 

§  286a. 2  Applicability  and  scope. 

(a)  The  provisions  of  this  Part  apply 
without  restrictions  to  the  Office  of  the 
Secretary  of  Defense,  the  Military  De¬ 
partments,  the  Organization  of  the  Joint 
Chiefs  of  Staff,  and  the  Defense  Agencies 
(hereinafter  referred  to  singularly  as  a 
“Component”  or  collectively  as  “DOD 
Components”)  except  for  The  National 
Security  Agency;  it  is  applicable  to  all 
National  Security  Agency  official  records 
and  systems  of  records  except  those 
maintained  pursuant  to  Public  Law  86-36 
and  Public  Law  88-290. 

(b)  Its  provisions  govern  the  collec¬ 
tion,  maintenance,  use  and  dissemina¬ 
tion  of  personal  information  by  the  De¬ 
partment  of  Defense  in  accordance  with 
5  USC  652a.  Requests  for  information 
under  the  Freedom  of  Information  Act 
(5  USC  652)  by  an  individual  about  an¬ 
other  individual  are  governed  by  the  pro¬ 
visions  of  DoD  Directive  5400.7  (32  CFR 
286) .  Requests  for  personal  information 
from  the  General  Accounting  Office  are 
governed  by  DoD  Directive  7650.1,1  re¬ 
quests  for  personal  information  from  the 
Congress  are  governed  by  DoD  Directive 
5400.4 1  and  from  other  agencies  and  the 
courts  by  DoD  Directive  5400.7  (32  CFR 
286)  as  well  as  the  provisions  of  this 
Part. 

§  286a. 3  Policy. 

The  policy  of  the  Department  of  De¬ 
fense  is  to: 

(a)  Preserve  the  personal  privacy  of 
individuals,  permitting  an  individual  to 
know  what  records  pertaining  to  him  are 
collecetd,  maintained,  used,  or  dissemi¬ 
nated  in  the  Department  of  Defense,  and 
to  have  access  to  and  have  a  compre¬ 
hensible  copy  made  of  all  or  any  portion 
of  such  records,  and  to  correct  or  amend 
such  records. 

(b)  Collect,  maintain,  use,  or  dissemi¬ 
nate  any  record  of  identifiable  personal 
information  in  a  manner  that  assures 
that  such  action  is  for  a  necessary  and 
lawful  purpose;  that  the  information  is 
timely  and  accurate  for  its  intended  use; 
and  that  adequate  safeguards  are  pro¬ 
vided  to  prevent  misuse  of  such  infor¬ 
mation. 

§  286a. 4  Authority  and  Responsibilities. 

(a)  Defense  Privacy  Board.  A  Defense 
Privacy  Board  is  hereby  established  for 
the  purpose  of  ensuring  the  preservation 
of  individual  privacy  within  the  Depart¬ 
ment  of  Defense.  Privacy  programs  and 


1  Filed  as  part  of  original.  Copies  available 
from  the  U.S.  Naval  Publications  and  Forms 
Center,  6801  Tabor  Avenue,  Philadelphia, 
Pennsylvania  19120,  Attn:  Code  300. 


procedures  shall  be  developed  and  co¬ 
ordinated  by  the  Board  under  the  chair¬ 
manship  of  the  Deputy  Assistant  Secre¬ 
tary  of  Defense  (Administration) . 

(1)  Membership  of  the  Board  shall 
consist  of  representatives  designated  by 
the  Secretaries  of  the  Military  Depart¬ 
ments;  Director,  Defense  Supply  Agency; 
Assistant  Secretary  of  Defense  (Manpow¬ 
er  and  Reserve  Affairs) ;  Assistant  Secre¬ 
tary  of  Defense  (Comptroller) ;  and  the 
General  Counsel. 

(2)  The  Board  shall  ensure  active  par¬ 
ticipation  by  all  DoD  Components  in  the 
development  and  operation  of  the  Privacy 
Program,  and  shall  ensure  that  each 
DoD  Component: 

(i)  Identify  all  DoD  systems  of  records 
affected  by  the  Privacy  Act 

(ii)  Obtain  all  data  required  by  the 
Act  concerning  each  record  system  so 
identified. 

(iii)  Review  policies,  practices  and 
procedures  relating  to  each  identified 
system  of  records  to  ensure  they  are  in 
conformity  with  the  Act. 

(iv)  Review  for  conformity  with  the 
Act,  all  procedures,  Including  forms, 
which  require  an  individual  to  furnish 
information,  and  formulate  corrective  or 
supplementary  provisions,  as  necessary. 

(v)  Supervise  the  preparation  for  pub¬ 
lication  in  the  Federal  Register  of  all  re¬ 
quired  information  on  systems  of  records 
affected  by  the  Act. 

(vi)  In  conjunction  with  the  Office  of 
the  Assistant  Secretary  of  Defense 
(Manpower  and  Reserve  Affairs)  (OASD 
(M&RA) ) ,  ensure  development  within 
each  DoD  Component  of  an  appropriate 
training  program  for  all  personnel  whose 
duties  involve  responsibilities  for  systems 
of  records  affected  by  the  Act. 

(vii)  Refer  to  the  Office  of  General 
Counsel,  Department  of  Defense  for  reso¬ 
lution,  any  requirement  for  information 
from  an  individual  which  does  not  appear 
to  be  clearly  authorized  by  law  or  Execu¬ 
tive  Order. 

(viii)  Review  proposed  DoD  Directives 
and  related  issuances  pertaining  to  the 
Privacy  Act,  as  well  as  draft  implement¬ 
ing  regulations  of  the  DoD  Components, 
in  order  to  provide  the  comprehensive 
guidance  necessary  for  uniform  compli¬ 
ance  with  the  Act  by  all  elements  of  the 
Department  of  Defense. 

(ix)  Serve  as  the  focal  point  on  pri¬ 
vacy  matters  for  the  Department  of  De¬ 
fense  in  communications  with  the  Office 
of  Management  and  Budget,  the  Privacy 
Protection  Study  Commission,  and  the 
Office  of  the  Federal  Register  for  publi¬ 
cation  of  system  notices. 

(b)  DoD  Components.  The  Head  of 
each  DoD  Component  shall: 

(1)  Designate  a  Privacy  Act  officer  to 
serve  as  the  principal  point  of  contact 
on  privacy  matters; 

(2)  Establish  and  maintain  an  effec¬ 
tive  internal  Privacy  Program,  through 
all  echelons,  as  prescribed  herein. 

(3)  Cause  to  review  all  directives  to 
ensure  compliance  with  the  Privacy  Act 
of  1974. 

(c)  The  Assistant  Secretary  of  De¬ 
fense  ( Manpower  and  Reserve  Affairs ). 
In  conjunction  with  the  Defense  Privacy 


Board,  the  ASD  (M&RA)  shall  ensure 
that  the  various  DoD  Components  in¬ 
struct  all  personnel  involved  in  the  de¬ 
sign,  development,  operation,  or  main¬ 
tenance  of  any  system  of  records,  or  in 
maintaining  any  record,  in  the  rules  and 
requirements  of  the  Privacy  Act  and  in 
the  penalties  for  noncompliance. 

(d)  The  Assistant  Secretary  of  De¬ 
fense  (.Comptroller) .  The  ASD  (Comp¬ 
troller)  shall  formulate  DoD  policies  to 
ensure  that  ADP  systems  contain  appro¬ 
priate  safeguards  to  protect  both  per¬ 
sonal  privacy  and  national  security,  in 
accordance  with  DoD  Directive  5100. 40.1 

§  286a. 5  Annual  report. 

(a)  Each  DoD  Component  shall  pre¬ 
pare  an  annual  report  for  the  preceding 
calendar  year  on  its  implementation  of 
the  Privacy  Act  of  1974. 

(b)  Six  copies  of  the  report  shall  be 
furnished  to  OASD(C)  by  March  31  of 
each  year  for  transmittal  to  the  Office 
of  Management  and  Budget. 

(c)  The  annual  report  shall  contain 
the  following: 

(1)  Summary.  A  brief  management 
summary  of  the  status  of  actions  taken 
to  comply  with  the  Act,  the  results  of 
these  efforts,  any  problems  encountered 
and  recommendations  for  any  changes  in 
legislation,  policies  or  procedures. 

(2)  Accomplishments.  A  summary  of 
major  accomplishments;  i.e.,  improve¬ 
ments  in  agency  Information  practices 
and  safeguards. 

(3)  Plans.  A  summary  of  major  plans 
for  activities  in  the  upcoming  year,  e.g., 
area  of  emphasis,  additional  securing  of 
facilities  planned. 

(4)  Exemptions.  A  list  of  systems 
which  are  exempted  during  the  year 
from  any  of  the  operative  provisions  of 
this  law  permitted  under  the  terms  of 
subsections  (j)  and  (k)  of  the  Privacy 
Act,  whether  or  not  the  exemption  was 
obtained  dining  the  year,  the  number 
of  records  in  each  system  exempted  from 
each  specific  provision  and  reasons  for 
Invoking  the  exemption. 

(5)  Number  of  systems.  A  brief  sum¬ 
mary  of  changes  to  the  total  inventory 
of  personal  data  systems  subject  to  the 
provisions  of  the  Act,  including  reasons 
for  major  changes;  e.g.  the  extent  to 
which  review  of  the  relevance  of  and 
necessity  for  records  has  resulted  in  eli¬ 
mination  of  all  or  portions  of  systems  of 
records  or  any  reduction  in  the  number 
of  individuals  on  whom  records  are  main¬ 
tained. 

(6)  Operational  experiences.  A  general 
description  of  operational  experiences 
including  estimates  of  the  number  of  in¬ 
dividuals  (in  relation  to  the  total  num¬ 
ber  of  records  in  the  system)  request¬ 
ing  information  on  the  existence  of 
records  pertaining  to  them,  refusing  to 
provide  information,  requesting  access  to 
their  records,  appealing  initial  refusals 
to  amend  records,  and  seeking  redress 
through  the  courts. 


1  Filed  as  part  of  original.  Copies  available 
from  the  U.S.  Naval  Publications  and  Forms 
Center,  6801  Tabor  Avenue,  Philadelphia, 
Pennsylvania  19120,  Attn:  Code  300. 
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(7)  Costs.  Any  available  data,  or  esti¬ 
mates,  of  the  costs  of  administering  the 
Frivacar  Act  of  1974.  % 

<d>  This  reporting  requirement  is  as¬ 
signed  Report  Control  Symbol  DD(A') 
1379. 

§  286a. 6  Definitions. 

(a)  Individual.  A  citizen  of  the  United 
States  or  an  alien  lawfully  admitted  for 
permanent  residence.  A  legal  guardian 
or  the  parent  of  a  minor  have  the  same 
rights  as  the  individual  and  may  act  on 
behalf  of  the  individual. 

(b)  Maintain  (.records  on  individuals ) . 
Collect,  use,  or  disseminate. 

(c)  Record.  Any  item,  collection,  or 
grouping  of  information  about  an  indi¬ 
vidual  that  is  maintained  by  a  compo¬ 
nent  or  element  thereof,  including,  but 
not  limited  to,  his  education,  financial 
transactions,  medical  history,  and  crim¬ 
inal  or  employment  history  and  that  con¬ 
tains  his  name,  or  the  identifying  num¬ 
ber,  symbol,  or  other  identifying  particu¬ 
lar  assigned  to  the  individual,  such  as  a 
finger  or  voice  print  or  a  photograph. 

(d)  System  of  records.  A  group  of  any 
records  under  the  control  of  any  compo¬ 
nent  or  element  thereof  from  which  in¬ 
formation  is  retrieved  by  the  name  of 
an  individual  or  by  some  identifying 
number,  symbol  or  other  identifying  par¬ 
ticular  assigned  to  the  individual. 

(e)  Routine  use.  With  respect  to  the 
disclosure  of  a  record,  or  the  use  of  such 
record  for  a  purpose  which  is  compatible 
with  the  purpose  for  which  it  was  col¬ 
lected.  Routine  use  encompasses  not  only 
common  or  ordinary  uses,  but  also  all 
the  proper  and  necessary  uses  of  the 
record,  even  if  such  use  occurs  infre¬ 
quently. 

§  286a. 7  Access  by  the  individual. 

(a)  Upon  request,  an  individual  shall 
be  informed  whether  or  not  a  system  of 
records  contains  a  record  pertaining  to 
him,  and  accompanied  by  a  person  of 
his  own  choosing,  if  he  so  desires,  shall 
be  permitted  to  review  his  records,  and 
to  obtain  a  copy  of  such  records  in  a 
form  that  is  comprehensible  to  him  at 
a  reasonable  cost  unless  exempted  in 
accordance  with  §  286a. 10  or  subsection  5 
of  this  paragraph.  This  Part  does  not  re¬ 
quire  that  a  record  be  created  or  that 
an  individual  be  given  access  to  records 
which  are  not.  retrieved  by  name  or  other 
Individual  identifier.  Only  costs  of  repro¬ 
duction,  as  set  forth  in  DoD  Directive 
5400.7  (32  CFR  286)  may  be  charged; 
however,  if  copying  is  the  only  means 
whereby  the  record  can  be  made  avail¬ 
able  to  the  Individual,  reproduction  fees 
will  not  be  assessed  (i.e.  when  a  copy 
must  be  made  in  order,  to  delete  infor¬ 
mation  contained  on  the  record  pertain¬ 
ing  to  another  individual). 

(1)  The  granting  of  access  to  a  record 
containing  personal  information  shall 
not  be  conditioned  upon  any  requirement 
that  the  individual  state  a  reason  or 
otherwise  justify  the  need  to  gain  access. 

(2)  Prior  to  being  granted  access  to 
personal  Information,  an  individual  may 
be  required  to  provide  reasonable  verifi¬ 
cation  of  his  identity. 


(i)  No  verification  of  identity  shall  be 
required  of  an  individual  seeking  access 
to  records  which  are  otherwise  available 
to  any  member  of  the  public  under  DoD 
Directive  5400.7  (40  FR  2208). 

(ii)  For  the  individual  who  seeks  access 
in  person,  verification  of  identity  will 
normally  be  made  by  those  documents 
which  an  individual  is  likely  to  have 
readily  available,  such  as  employee  or 
military  Identification  card,  driver’s 
license,  or  medical  card. 

(iii)  When  access  is  requested  by  mail, 
verification  of  identity  may  consist  of  the 
individual  providing  certain  minimum 
identifying  data,  such  as,  name  and  date 
of  birth  or  such  other  information 
deemed  necessary  by  the  DoD  Component 
having  custody  of  the  record.  If  the  sen¬ 
sitivity  of  the  data  warrants,  a  signed 
notarized  statement  of  identity  may  be 
required. 

(iv)  An  individual  shall  not  be  denied 
access  to  his  record  for  refusing  to  dis¬ 
close  his  Social  Security  Number  (SSN) 
unless  disclosure  of  his  SSN  is  required 
by  statute  or  by  regulation  adopted  be¬ 
fore  January  1,  1975. 

(v)  Individuals  may  not  be  denied  ac¬ 
cess  to  a  record  pertaining  to  themselves 
because  those  records  are  exempted  from 
disclosure  under  the  provisions  of  DoD 
Directive  5400.7  (32  CFR  286) . 

(3)  Access  to  a  record  or  a  copy  there¬ 
of  will  not  be  denied  solely  because  the 
record’s  physical  presence  is  not  readily 
available  (i.e.,  on  magnetic  tape)  or  be¬ 
cause  the  context  of  the  record  may  dis¬ 
close  sensitive  information  about  an¬ 
other  individual.  To  protect  the  personal 
privacy  of  other  individuals  who  may  be 
identified  in  a  record,  an  extract  shall  be 
prepared  deleting  only  that  information 
which  would  not  be  released  to  the  re¬ 
questing  individual  under  DoD  Direc¬ 
tive  5400.7  (32  CFR  286). 

(4)  A  medical  record  shall  be  disclosed 
to  the  individual  to  whom  it  pertains  un¬ 
less,  in  the  judgment  of  a  physician,  ac¬ 
cess  to  such  record  could  have  an  adverse 
effect  upon  the  Individual’s  physical  or 
mental  health.  When  it  has  been  deter¬ 
mined  that  the  disclosure  of  medical  in¬ 
formation  could  have  an  adverse  effect 
upon  the  individual  to  whom  it  pertains, 
the  information  may  be  transmitted  to 
a  physician  named  by  the  requesting 
individual. 

(5)  This  Part  does  not  entitle  an  in¬ 
dividual  to  have  access  to  any  informa¬ 
tion  compiled  in  reasonable  anticipation 
of  a  civil  action  or  proceeding. 

•  (6)  A  DoD  Component  may  require  an 
individual  who  wishes  to  be  accompanied 
by  another  person  when  receiving  access 
to  his  records  to  furnish  a  written  state¬ 
ment  authorizing  discussion  of  the  rec¬ 
ords  in  the  presence  of  the  aocompanying 
person. 

(7)  Any  requests  from  an  individual 
for  access  to  a  system  of  records  shall 
be  processed  in  accordance  with  this  Part 
and  not  the  Freedom  of  Information  Act 
(5  U.S.C.  552).  Normally,  requests  for 
access  to  records  should  be  acknowledged 
within  10  workdays  of  receipt  and  access 
provided  within  30  workdays. 


(8)  Copies  of  investigatory  records 
compiled  by  any  investigative  organiza¬ 
tion,  but  in  the  temporary  custody  of  an 
element  requesting  the  record  for  pur¬ 
poses  of  adjudication  or  other  personal 
action,  are  the  records  of  the  originating 
investigative  organization.  Individuals 
seeking  access  to  such  records  shall  be 
directed  to  the  originating  investigative 
organization  and  should  be  instructed 
to  direct  all  requests  submitted  under 
the  Privacy  Act  of  1974  to  that  organiza¬ 
tion.  Records  concerning  the  adjudica¬ 
tion,  or  other  personnel  actions  based  on 
the  investigative  records,  originated  by 
the  organization  using  the  investigation, 
are  the  records  of  the  using  organization 
which  shall  respond  to  all  other  requests 
under  the  Privacy  Act  of  1974  concern¬ 
ing  them. 

(b)  Amendment  of  personal  informa¬ 
tion.  (1)  An  individual  shall  be  given  the 
opportunity  to  request  either  in  person 
or  through  the  mail  that  his  record  be 
amended.  The  component  may,  however, 
require  that  such  request  be  made  in 
writing.  Instructions  for  the  preparation 
of  a  request  and  any  forms  employed 
should  be  as  brief  and  as  simple  as  pos¬ 
sible.  Requests  should  contain  as  a  mini¬ 
mum,  identifying  information  to  locate 
the  record,  a  description  of  the  items  to 
be  amended  and  the  reason  amendment 
is  being  requested.  A  request  shall  not 
be  rejected  or  required  to  be  resubmitted 
unless  additional  information  is  essen¬ 
tial  to  process  the  request  Incomplete  or 
inaccurate  requests  shall  not  be  rejected 
categorically;  the  individual  shall  be 
asked  to  clarify  the  request  as  needed. 
Individuals  shall  be  required  to  provide 
verification  of  identity  as  in  (a)(2)  of 
this  section,  to  assure  that  the  requester 
is  seeking  to  amend  records  pertaining 
to  him  and  not,  inadvertently  or  inten¬ 
tionally,  the  records  of  another 
individual. 

(2)  A  written  acknowledgment  of  the 
receipt  of  a  request  for  amendment  of  a 
record  must  be  provided  to  the  individ¬ 
ual  within  10  working  days  (excluding 
Saturdays,  Sundays,  and  legal  public 
holidays)  after  receipt  by  the  proper 
office.  The  acknowledgment  shall  clearly 
identify  the  request  and  advise  the  in¬ 
dividual  when  he  may  expect  to  be  ad¬ 
vised  of  action  taken  on  the  request. 
Whenever  practicable  the  decision  shall 
be  made  within  30  working  days.  No  sep¬ 
arate  acknowledgment  of  receipt  is  nec¬ 
essary  if  the  request  can  be  either  ap¬ 
proved  or  denied,  and  the  individual 
advised  within  the  10-day  period.  For 
requests  presented  in  person,  written 
acknowledgment  may  be  provided  at  the 
time  the  request  is  presented. 

(3)  If  the  DoD  Component  agrees  with 
any  portion  or  all  of  the  individual’s  re¬ 
quest  to  amend  a  record,  it  shall  promptly 
advise  the  Individual  and  amend  the 
record  accordingly.  If  a  disclosure  ac¬ 
counting  has  been  made,  the  component 
shall  advise  all  previous  recipients  of  the 
record  that  the  amendment  has  been 
made  and  the  substance  of  the  correc¬ 
tion. 

(4)  If  the  DoD  Component  disagrees 
with  all  or  any  portion  of  a  request  to 
amend  a  record,  it  shall  promptly; 
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(i)  Advise  the  individual  of  its  refusal 
and  the  reasons  therefor; 

(il)  Inform  the  individual  that  he  may 
request  a  further  review  by  the  Head 
of  the  DoD  Component,  or  his  designee; 
and 

(iii)  Describe  the  procedures  for  re¬ 
questing  such  a  review,  including  the 
name  and  address  of  the  official  to  whom 
the  request  should  be  directed. 

(5)  A  review  of  the  initial  refusal  to 
amend  a  record  shall  be  made  if  request¬ 
ed  by  the  individual. 

(i)  The  Head  of  the  DoD  Component, 
or  his  official  designee,  shall  make  a  re¬ 
view  of  the  initial  determination. 

(li)  If,  after  conducting  the  review, 
the  reviewing  official  also  refuses  to 
amend  the  record  in  accordance  with  the 
individual’s  request,  the  individual  shall 
be  notified: 

(A)  Of  the  refusal  and  the  reasons 
therefor; 

(B)  Of  the  right  to  file  a  concise  state¬ 
ment  of  reasons  for  disagreeing  with  the 
decision  of  the  agency; 

(C)  Of  the  procedures  for  filing  a 
statement  of  disagreement;  and  that 
such  statement  will  be  made  available 
to  anyone  to  whom  the  record  is  subse¬ 
quently  disclosed. 

(D)  That  prior  recipients  of  the  dis¬ 
puted  record  will  be  provided  a  copy  of 
the  statement  of  disagreement  to  the 
extent  that  an  accounting  of  disclosures 
is  maintained; 

(E)  Of  his  right  to  seek  judicial  re¬ 
view  of  the  agency’s  refusal  to  amend 
a  record. 

(iii)  If  the  reviewing  official  deter¬ 
mines  that  the  record  should  be  amended 
in  accordance  with  the  request,  the  DoD 
Component  shall  amend  the  record,  ad¬ 
vise  the  individual,  and  inform  previous 
recipients  where  an  accounting  of  dis¬ 
closure  has  been  maintained. 

(iv)  A  final  determination  on  the  indi¬ 
vidual’s  request  for  a  review  of  an  initial 
refusal  to  amend  a  record  must  be  com¬ 
pleted  within  30  working  days  after  re¬ 
ceipt  by  the  proper  office  unless  the  Head 
of  the  DoD  Component  determines  that  a 
fair  and  equitable  review  cannot  be  com¬ 
pleted  in  that  time.  If  additional  time  is 
required,  the  Individual  shall  be  informed 
in  writing  of  the  reasons  for  the  delay 
and  of  the  approximate  date  on  which 
the  review  is  expected  to  be  completed. 

(6)  When  an  individual  files  a  state¬ 
ment  of  dispute,  the  DoD  Component 
shall  clearly  annotate  the  record  so  that 
the  dispute  is  apparent  to  anyone  who 
may  subsequently  grant  access  to,  use  or 
disclose  the  record.  The  notation  itself 
shall  be  integral  to  the  record.  Where  an 
accounting  of  disclosure  has  been  made, 
the  component  shall  advise  previous  re¬ 
cipients  that  the  record  has  been  dis¬ 
puted  and  shall  provide  a  copy  of  the 
individual’s  statement. 

(i)  The  individual’s  statement  of  dis¬ 
pute  need  not  be  filed  as  an  integral  part 
of  the  record  to  which  it  pertains.  It 
shall,  however,  be  maintained  in  such  a 
manner  as  to  permit  ready  retrieval 
whenever  the  disputed  portion  of  the 
record  is  to  be  disclosed.  When  informa¬ 
tion  which  is  the  subject  of  a  statement 


of  dispute  is  subsequently  disclosed,  the 
DoD  Component  shall  note  which  infor¬ 
mation  is  disputed  and  provide  a  copy 
o X  the  individual’s  statement. 

(il)  A  DoD  Component  may  Include  a 
brief  summary  of  Its  reasons  for  not 
making  an  amendment  when  disclosing 
disputed  Information.  Summaries  nor¬ 
mally  will  be  limited  to  the  reasons 
stated  to  the  Individual.  The  Compo¬ 
nent’s  summary  will  be  treated  as  part 
of  the  individual's  record;  however,  it 
will  not  be  subject  to  the  amendment 
procedures. 

§  286a. 8  Disclosure  to  others. 

(a)  Except  as  prescribed  in  §  286a. 7, 
this  Part  does  not  require  disclosure  of 
records  to  anyone  other  than  the  indi¬ 
vidual  to  whom  the  records  pertain. 

(b)  No  record  contained  In  a  system  of 
records  maintained  within  the  Depart¬ 
ment  of  Defense  shall  be  disclosed  by  any 
means  of  communication  to  any  person, 
or  to  any  agency  outside  the  Department 
of  Defense,  except  pursuant  to  a  written 
request  by,  or  with  the  prior  written  con¬ 
sent  of,  the  individual  to  whom  the  rec¬ 
ord  pertains,  unless  disclosure  of  the 
record  will  be: 

(1)  To  those  officials  and  employees 
of  the  Department  of  Defense  who  have 
a  need  for  the  record  in  the  performance 
of  their  duties  and  the  use  is  compatible 
with  the  purpose  for  which  the  record  is 
maintained.  This  includes,  for  example, 
transfer  of  information  between  compo¬ 
nents  when  civilians  or  military  person¬ 
nel  assigned  or  affiliated  with  one  com¬ 
ponent  are  processed  by  an  activity  of 
another  component  such  as  Armed 
Forces  Examination  and  Entrance  Sta¬ 
tions  (AFEES),  Air  Terminals,  or  De¬ 
fense  Investigative  Service  (DIS) . 

(2)  Required  to  be  disclosed  to  a  mem¬ 
ber  of  the  public  by  the  Freedom  of 
Information  Act  (5  U.S.C.  552).  Some 
examples  of  personal  Information  per¬ 
taining  to  military  personnel,  which  nor¬ 
mally  are  released  without  an  unwar¬ 
ranted  invasion  of  privacy  are:  name, 
rank,  date  of  rank,  salary,  present  and 
past  duty  assignments,  future  assign¬ 
ments  which  have  been  finalized,  office 
phone  number,  source  of  commission, 
military  and  civilian  educational  level, 
and  promotion  sequence  number.  Dis¬ 
closure  of  personal  information  pertain¬ 
ing  to  civilian  employees  shall  be  made 
in  accordance  with  the  Federal  Person¬ 
nel  Manual. 

(3)  For  a  routine  use  as  defined  in 
§  286a. 6  and  described  in  §  286a.l2. 

(4)  To  the  Bureau  of  the  Census  for 
purposes  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity  au¬ 
thorized  by  law. 

(5)  To  a  recipient  who  has  provided 
the  Department  of  Defense  or  Compo¬ 
nent  with  advance  adequate  written  as¬ 
surance  that  (i)  the  record  will  be  used 
solely  as  a  statistical  research  or  report¬ 
ing  record;  (ii)  the  record  is  to  be  trans¬ 
ferred  in  a  form  that  is  not  individually 
identifiable  (i.e.  the  identity  of  the  in¬ 
dividual  cannot  be  determined  by  com¬ 
bining  various  statistical  records) ;  and 
(iii)  will  not  be  used  to  make  any  de¬ 


cisions  about  the  rights,  benefits  or  en¬ 
titlements  of  an  Individual. 

(6)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has  suf¬ 
ficient  historical  or  other  value  to  war¬ 
rant  its  continued  preservation  by  the 
United  States  Government,  or  for  evalu¬ 
ation  by  the  Administrator  of  General 
Services  or  his  designee  to  determine 
whether  the  record  has  such  value.  A 
record  transferred  to  a  Federal  records 
center  for  safekeeping  or  storage  does 
not  fall  within  this  categoy  since  Fed¬ 
eral  records  center  personnel  act  on  be¬ 
half  of  the  Department  of  Defense  in 
this  instance  and  the  records  remain  un¬ 
der  the  control  of  the  DoD  Component. 
No  disclosure  accounting  record  of  the 
transfer  of  records  to  Federal  records 
centers  need  be  maintained. 

(7)  To  another  agency  or  to  an  in¬ 
strumentality  of  any  governmental  juris¬ 
diction  within  or  under  the  control  of 
the  United  States  for  a  civil  or  criminal 
law  enforcement  activity  If  the  activity 
is  authorized  by  law,  and  if  the  head  of 
the  agency  or  instrumentality  has  made 
a  written  request  to  the  DoD  Component 
which  maintains  the  record  specifying 
the  particular  portion  desired  and  the 
law  enforcement  activity  for  which  the 
record  is  sought.  Blanket  requests  for  all 
records  pertaining  to  an  Individual  will 
not  be  accepted.  A  record  may  also  be 
disclosed  to  a  law  enforcement  agency  at 
the  Initiative  of  the  DoD  Component 
which  maintains  the  record  when  crim¬ 
inal  conduct  is  suspected,  provided  that 
such  disclosure  has  been  established  in 
advance  as  a  "routine  use." 

<8)  To  a  person  pursuant  to  a  showing 
of  compelling  circumstances  affecting 
the  health  or  safety  of  an  individual  if 
upon  such  disclosure  notification  is 
transmitted  to  the  last  known  address  of 
the  individual  to  whom  the  record  per¬ 
tains. 

(9)  To  either  House  of  Congress,  or,  to 
the  extent  of  matter  within  its  Jurisdic¬ 
tion,  any  committee  or  subcommittee 
thereof,  or  any  joint  committee.  This 
does  not  authorize  the  disclosure  of  any 
record  subject  to  this  Part  to  members  of 
Congress  acting  in  their  individual  ca¬ 
pacities  or  on  behalf  of  their  constitu¬ 
ents,  unless  the  individual  consents. 

(10)  To  the  Comptroller  General,  or 
any  of  his  authorized  representatives,  in 
the  course  of  the  performance  of  the 
duties  of  the  General  Accounting  Office. 

(11)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction. 

(i)  When  a  record  is  disclosed  under 
compulsory  legal  process  and  when  the 
issuance  of  that  order  or  subpoena  is 
made  public  by  the  court  which  issued  it, 
make  reasonable  efforts  to  notify  the 
individual  to  whom  the  record  pertains. 
This  may  be  accomplished  by  notifying 
the  individual  by  mail  at  his  most  re¬ 
cent  address  as  contained  in  the  DoD 
Component’s  records. 

(ii)  Upon  being  served  with  an  order 
to  disclose  a  record,  the  DoD  Component 
shall  endeavor  to  determine  whether  the 
issuance  of  the  order  is  a  matter  of  pub¬ 
lic  record  and,  if  it  is  not,  seek  to  be 
advised  when  it  becomes  public.  An  ac¬ 
counting  of  the  disclosure  shall  be  made 
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at  the  time  the  Component  complies  with 
the  order  or  subpoena. 

(c)  Each  DoD  Component,  with  re¬ 
spect  to  each  system  of  records  under  its 
control,  shall: 

(1)  Except  for  disclosures  made  under 
(b)  (1)  and  (2)  of  this  section,  keep  an 
accurate  accounting  of  the  date,  nature, 
and  purpose  of  each  disclosure  of  a  rec¬ 
ord  to  any  person  or  to  another  agency; 
and  the  name  and  address  of  the  person 
or  agency  to  whom  the  disclosure  is 
made.  A  DoD  Component  need  not  make 
a  notation  on  a  single  document  of  every 
disclosure  of  a  particular  record,  pro¬ 
vided  it  can  construct  from  its  system 
the  required  accounting  information  (i) 
when  required  by  the  individual;  (ii) 
when  necessary  to  inform  previous  re¬ 
cipients  of  any  amended  records  or  (iii) 
when  providing  a  cross  reference  to  the 
justification  or  basis  upon  which  the  dis¬ 
closure  was  made  (including  any  written 
documentation  as  required  in  the  case  of 
the  release  of  records  for  statistical  or 
law  enforcement  purposes) . 

(2)  Retain  the  accounting  made  under 
subsection  (1)  of  this  paragraph,  for  at 
least  5  years  after  the  last  disclosure  or 
the  life  of  the  record,  whichever  is  longer. 
No  record  of  the  disclosure  of  this  ac¬ 
counting  need  be  maintained. 

(3)  Upon  request  of  the  individual  to 
whom  the  record  pertains,  make  avail¬ 
able  to  that  Individual  all  information  in 
its  accounting  of  disclosures  except  that 
pertaining  to  disclosures  for  law  enforce¬ 
ment  purposes  pursuant  to  (b)  (7),  this 
section. 

(d)  Names  and  addresses.  (1)  An  in¬ 
dividual’s  name  and  address  may  not  be 
sold  or  rented  by  a  component  unless 
such  action  is  specifically  authorized  by 
law.  This  provision  shall  not  be  construed 
to  require  the  withholding  of  names  and 
addresses  otherwise  permitted  to  be  made 
public. 

(2)  Lists  or  compilations  of  names  and 
home  addresses,  or  single  home  addresses 
will  not  be  disclosed,  without  the  consent 
of  the  individual  involved,  to  the  public 
Including,  but  not  limited  to.  Individual 
congressmen,  creditors,  and  commercial 
and  financial  institutions.  Requests  for 
home  addresses  may  be  referred  to  the 
last  known  address  of  the  individual  for 
reply  at  his  discretion  and  the  requester 
will  be  notified  accordingly.  This  prohi¬ 
bition  may  be  waived  when  circum¬ 
stances  of  a  case  indicate  compelling  and 
overiding  interests. 

§  286a. 9  Collection  of  personal  informa¬ 
tion  from  individuals. 

(a)  Collection  directly  from  individual. 
Personal  information  shall  be  collected 
to  the  greatest  extent  practicable  directly 
from  the  individual  when  the  informa¬ 
tion  may  result  in  adverse  determina¬ 
tions  about  an  individual’s  rights,  bene¬ 
fits,  and  privileges  under  Federal 
programs.  The  collection  of  information 
from  third  parties  shall  be  minimized. 
Exceptions  to  this  policy  may  be  made 
under  certain  circumstances,  such  as  the 
following: 

(1 )  There  is  a  need  to  ensure  accuracy 
of  information  supplied  by  an  individual 
by  verifying  with  a  third  party,  such  as 


in  the  case  of  verifying  information  for 
a  security  clearance. 

(2)  The  nature  of  the  information  is 
such  that  it  can  only  be  obtained  from  a 
third  party,  such  as  an  employee’s  per¬ 
formance  in  a  previous  job  or  assign¬ 
ment. 

(3)  Obtaining  the  information  from 
the  individual  would  present  exceptional 
practical  difficulties  or  would  result  in 
unreasonable  cost. 

(b)  Informing  individuals  from  whom 
information  is  requested.  Each  indi¬ 
vidual  who  is  asked  to  supply  personal 
information  must  be  told  of  (1)  the  au¬ 
thority  (statute  or  executive  order) 
which  authorizes  its  solicitation;  (2) 
the  principal  purpose  or  purpose  for 
which  it  is  to  be  used;  (3)  the  routine 
uses  to  be  made  of  it;  (4)  whether  fur¬ 
nishing  such  information  is  mandatory 
or  voluntary;  and  (5)  the  effects  on  him, 
if  any,  of  not  providing  it.  This  notice  to 
the  individual  may  be  made  on  the  form 
which  the  DoD  Component  uses  to  collect 
the  information  or  on  a  separate  form 
which  can  be  retained  by  the  individual. 
This  advice  must  be  given  regardless  of 
the  media  used  in  requesting  informa¬ 
tion,  whether  it  is  a  “form”  in  the  usual 
sense  (i.e.,  a  preprinted  document  with 
a  control  number  and  an  edition  date) 
or  a  format,  questionnaire,  survey  sheet, 
or  report  rendered  on  a  blank  sheet. 

(i)  “Forms"  in  use  prior  to  September 
27,  1975.  Forms  in  use  before  September 
27,  1975  which  are  to  be  used  on  and 
after  that  date,  must  meet  the  notice 
requirements  by  use  of  a  separate  state¬ 
ment  to  accompany  each  form  subject  to 
the  provisions  of  the  Privacy  Act  of  1974. 
The  statement  will  be  assigned  the  iden¬ 
tifying  number  used  in  collecting  the  in¬ 
formation  and  the  suffix  “Privacy  Act 
Statement”,  as  follows: 

(A)  For  forms  in  regularly  issued, 
numbered  series,  the  Privacy  Act  State¬ 
ment  shall  bear  the  same  number  as  the 
form  to  which  it  pertains. 

Example:  For  DD  Form  398,  Statement  of 
Personal  History,  the  applicable  notice  to 
each  Individual  asked  to  complete  the  form 
will  be  Identified  as  “DD  Form  398 — Privacy 
Act  Statement”. 

(B)  For  unnumbered  formats,  ques¬ 
tionnaires,  survey  forms  and  reports,  the 
Privacy  Act  Statement  will  bear  the  re¬ 
port  control  symbol  or  OMB  Approval 
Number  under  the  authority  of  which  the 
information  if  applicable. 

Example:  For  the  Air  Force  Junior  ROTC 
Survey  for  AFJROTC  Cadets  (Format  A), 
the  applicable  notice  to  each  Individual 
asked  to  complete  the  questionnaire  will  be 
Identified  as  "OMB  Approval  No.  21-R0268 — 
Privacy  Act  Statement”. 

(ii)  “Forms”  Initiated  or  Revised  On 
and  After  September  27,  1975.  As  forms 
are  revised  or  new  ones  issued  the  Pri¬ 
vacy  Act  Statement  shall  be  incorpo¬ 
rated,  if  practical,  in  the  body  of  each 
form,  format,  questionnaire,  survey  sheet 
or  report  initiated  or  revised  which  is 
used  to  collect  personal  information  on 
or  after  September  27,  1975.  Where  fea¬ 
sible  the  Privacy  Act  Statement  when 
incorporated  on  a  form,  format,  etc. 
should  be  positioned  such  a  manner  that 


the  Individual  will  be  Informed  of  the 
information  required  by  the  Act  before 
he  begins  to  furnish  any  of  the  informa¬ 
tion  requested. 

(iii)  Responsibilities.  (A)  The  propo¬ 
nent  (i.e.,  the  initiator)  has  the  final  re¬ 
sponsibility  for  determining  whether  a 
form,  format,  questionnaire,  survey,  or 
report  requires  a  Privacy  Act  Statement. 
Statements  should  be  sufficiently  com¬ 
plete  and  specific  but,  at  the  same  time, 
be  concise  and  couched  in  easily  under¬ 
stood  language. 

(B)  Forms  and  information  manage¬ 
ment  officers  at  all  echelons  within  DoD 
Components  must  assure  that  Privacy 
Act  Statements  are  available  and  that 
new  forms  contain  the  Privacy  Act  state¬ 
ments,  if  required. 

(C)  No  component  may  deny  any  in¬ 
dividual  any  right,  benefit,  or  privilege 
provided  by  law  because  of  such  individ¬ 
ual’s  refusal  to  disclose  his  (SSN) ,  unless 
such  disci osure  is  (1)  required  by  Federal 
statute  or  (2)  to  any  component  main¬ 
taining  a  system  of  records  in  existence 
and  operating  before  January  1,  1975,  if 
such  disclosure  was  required  under 
statute  or  regulation  adopted  prior  to 
such  date  to  verify  the  identity  of  an 
individual.  Executive  Order  No.  9397,  No¬ 
vember  22,  1943,  authorizes  components 
to  use  SSN  as  a  system  of  numerical 
identification  of  individuals. 

(D)  Any  DoD  Component  which  re¬ 
quests  an  individual  to  disclose  his  SSN 
must  inform  that  individual  (1 )  whether 
that  disclosure  is  mandatory  or  volun¬ 
tary;  (2)  by  what  statutory  or  other  au¬ 
thority  such  number  is  solicited;  and  (3) 
what  uses  will  be  made  of  it. 

(E)  If  disclosure  of  the  SSN  is  not  re¬ 
quired  by  Federal  statute  or  is  not  for 
a  system  of  records  in  existence  and 
operating  prior  to  January  1,  1975,  DoD 
Components  are  not  precluded  from  re¬ 
questing  it  from  individuals  concerned. 
However,  the  separate  Privacy  Act  State¬ 
ment  for  the  SSN  alone,  or  a  merged 
Privacy  Act  Statement,  covering  not  only 
the  SSN  but  also  other  items  of  personal 
information,  must  make  clear  that  the 
disclosure  of  the  SSN  is  voluntary.  If,  in 
such  instances,  the  individual  refuses  to 
disclose  it,  the  DoD  Component  con¬ 
cerned  must  be  prepared  to  identify  him 
by  alternate  means. 

§  286a.  10  Exemptions. 

The  Head  of  the  Component  shall  des¬ 
ignate  the  Component  systems  of  records 
which  are  to  be  exempted  from  certain 
provisions  of  the  Privacy  Act  of  1974,  and 
they  shall  cause  to  be  published  in  the 
Federal  Register,  information  specify¬ 
ing  the  name  of  each  designated  system, 
the  specific  provisions  of  the  act  from 
which  each  system  is  to  be  exempted,  and 
the  reasons  for  each  exemption  of  the 
record  system. 

(a)  General  Exemptions.  To  qualify 
for  a  general  exemption,  as  defined  in 
the  Privacy  Act  of  1974,  Component  or 
element  thereof  which  performs  as  its 
principal  function  any  activity  pertain¬ 
ing  to  the  enforcement  of  criminal  laws, 
Including  police  efforts  to  prevent,  con¬ 
trol,  or  reduce  crime  or  to  apprehend 
criminals,  and  the  activities  of  prose- 
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cutors,  courts,  correctional,  probation, 
pardon,  or  parole  authorities.  Such  sys¬ 
tem  of  records  must  consist  of: 

(1)  Information  compiled  for  the  pur¬ 
pose  of  Identifying  Individual  criminal 
offenders  and  alleged  offenders  and  con¬ 
taining  only  Identifying  data  and  nota¬ 
tions  of  arrests,  the  nature  and  dispo¬ 
sition  of  criminal  charges,  sentencing, 
confinement,  release,  and  parole  and 
probation  status; 

(2)  Information  complied  for  the  pur¬ 
pose  of  a  criminal  investigation.  Includ¬ 
ing  reports  of  informants  and  investi¬ 
gators,  and  associated  with  an  Identi¬ 
fiable  individual;  or 

(3)  Reports  identifiable  to  an  Individ¬ 
ual  compiled  at  any  stage  of  the  process 
of  enforcement  of  the  criminal  laws  from 
arrest  or  indictment  through  release 
from  supervision. 

(b)  Specific  Exemptions.  To  qualify 
for  a  specific  exemption,  as  defined  by 
the  Privacy  Act  of  1974  the  system  of 
records  must  be: 

(1)  Specifically  authorized  under  cri¬ 
teria  established  under  an  Executive  Or¬ 
der  to  be  kept  classified  in  the  interest 
of  national  defense  or  foreign  policy  and 
are  in  fact  properly  classified  pursuant 
to  such  Executive  Order; 

(2)  Investigatory  material  compiled 
for  law  enforcement  purposes,  other  than 
material  covered  under  a  general  ex¬ 
emption;  however,  an  individual  shall 
not  be  denied  access  to  information 
which  has  been  used  to  deny  him  a  right 
or  privilege  unless  disclosure  would  re¬ 
veal  a  confidential  source.  Components 
shall  establish  procedures  governing  the 
granting  of  confidentiality; 

(3)  Maintained  in  connection  with 
providing  protective  service  to  the  Pres¬ 
ident  of  the  United  States  or  other  indi¬ 
viduals  protected  pursuant  to  18  U.S.C. 
section  3056; 

(4)  Used  only  to  generate  aggregate 
data  or  for  other  similarly  evaluative  or 
analytic  purposes  and  which  are  not  used 
to  make  decisions  on  the  rights,  benefits, 
•r  entitlements  of  individuals  except  for 
the  disclosure  of  a  census  record  per¬ 
mitted  by  13  U.S.C.  section  8; 

(5)  Investigatory  material  compiled 
solely  for  the  purpose  of  determining 
suitability,  eligibility,  or  qualifications 
for  Federal  civilian  employment,  military 
service.  Federal  contracts,  or  access  to 
classified  information,  but  only  to  the  ex¬ 
tent  that  the  disclosure  of  such  material 
would  reveal  the  identity  of  a  source  who 
furnished  information  to  the  Govern¬ 
ment  under  an  express  promise  that  the 
identity  of  the  source  would  be  held  in 
confidence,  or  prior  to  September  27, 
1975,  under  an  implied  promise  that  the 
identity  of  the  source  would  be  held  in 
confidence.  Components  shall  establish 
procedures  governing  the  granting  of 
confidentiality; 

(6)  Testing  or  examination  material 
used  solely  to  determine  individual  qual¬ 
ifications  for  appointment  or  promotion 
in  the  Federal  service  the  disclosure  of 
which  would  compromise  the  objectivity 
or  fairness  of  the  testing  or  examination 
process;  or 


(7)  Evaluation  material  used  to  deter¬ 
mine  potential  for  promotion  tn  the 
Armed  Services,  but  only  to  the  extent 
that  the  disclosure  of  such  material 
would  reveal  the  identity  of  a  source  who 
furnished  information  to  the  Govern¬ 
ment  under  an  express  promise  that  the 
identity  of  the  source  would  be  held  in 
confidence  or  prior  to  September  27, 1975, 
under  an  implied  promise  that  the  iden¬ 
tity  of  the  source  would  be  held  in  con¬ 
fidence.  DoD  Components  shall  specify 
those  categories  of  individuals  for  whom 
pledges  of  confidentiality  may  be  made 
when  obtaining  information  on  an  indi¬ 
vidual’s  suitability  for  promotion. 

§  286a. 11  Systems  of  records. 

(a)  Contents.  (1)  Each  DoD  Compo¬ 
nent  or  element  thereof  shall  maintain 
in  its  records  systems  only  such  personal 
information  as  is  relevant  and  necessary 
to  accomplish  a  purpose  or  mission  re¬ 
quired  by  statute  or  Executive  Oder  of 
the  President. 

(2)  Components  shall  identify  the  spe¬ 
cific  provision  of  law,  or  Executive  Order, 
which  provides  authority  for  the  main¬ 
tenance  of  information  in  each  system 
of  records. 

(3)  Statutory  or  regulatory  authority 
to  establish  and  maintain  a  system  of 
records  does  not  convey  unlimited  au¬ 
thority  to  collect  and  maintain  all  in¬ 
formation  which  may  be  useful  or  con¬ 
venient  to  have.  The  proponent  of  each 
system  of  records  will  evaluate  each 
category  of  information  in  a  system  for 
both  necessity  and  relevance.  In  per¬ 
forming  this  evaluation  the  following 
points  will  be  considered: 

(i)  Relationship  of  each  item  of  in¬ 
formation  to  the  statutory  or  regulatory 
purpose  for  which  the  system  is  main¬ 
tained. 

(ii)  Specific  adverse  consequence  of 
not  collecting  each  category  of  informa¬ 
tion. 

(ill)  Possibility  of  meeting  the  in¬ 
formation  requirement  through  use  of 
information  not  individually  identifiable 
or  through  sampling  techniques. 

(lv)  Length  of  time  that  the  informa¬ 
tion  is  needed  and,  where  appropriate, 
techniques  for  purging  parts  of  the 
record. 

(v)  Financial  cost  of  information 
maintenance  compared  to  risk  or  adverse 
consequence  of  not  maintaining  It. 

(vi)  Necessity  and  relevance  of  this 
information  to  all  individuals  included 
in  the  system. 

(4)  Collection  will  be  discontinued  for 
each  category  or  item  of  information 
which  after  the  above  evaluation  does 
not  appear  to  be  reasonably  justifiable. 
Moreover,  such  Information  will  be 
withdrawn  and  destroyed  provided  it  can 
be  economically  segregated  from  neces¬ 
sary  and  relevant  information. 

(5)  The  evaluation  prescribed  above 
will  be  performed  by  each  proponent  of  a 
system  of  records : 

(i)  During  the  design  phase  of  a  new 
system  of  records  or  a  change  in  an  exist¬ 
ing  system  of  records. 


(ID  Annually,  prior  to  the  republica- 
tion  of  all  system  notices  in  the  Federal 
Register. 

(b)  Publication  of  record  system 
notices. 

(1)  General.  The  Privacy  Act  of  1974 
requires  that  a  notice  of  the  existence  of 
each  system  of  records,  be  published  in 
the  Federal  Register. 

(2)  Record  system  notices.  DoD  Com¬ 
ponents  proposing  new  systems  shall 
prepare  system  notices  according  to 
§  286a.l2  at  least  30  days  before  the  pro¬ 
posed  system  change  may  be  legally  im¬ 
plemented.  Initial  system  notices,  will  be 
submitted  to  the  OASD(C). 

(3)  Change  to  existing  systems  requir¬ 
ing  advanced  public  notice. 

(i)  The  following  proposed  changes  to 
an  existing  system  must  be  published  in 
the  Federal  Register  for  public  comment 
at  least  30  days  before  the  changes  are 
Implemented: 

(A)  Those  which  expand  the  catego¬ 
ries  of  individuals  on  whom  records  are 
maintained. 

(B)  Those  which  add  new  categories 
of  records  to  the  system. 

(C)  Those  which  add  new  categories 
of  sources. 

(D)  New  or  changed  routine  uses 
which  involve  disclosure  to  a  new  cate¬ 
gory  of  recipient. 

(E)  Changes  in  procedures  governing 
access. 

(ii)  Notices  of  proposed  changes  to 
existing'  systems  will  be  submitted  to 
OASD(C) . 

(4)  Changes  to  existing  systems  not 
requiring  advanced  public  notice. 
Changes  in  records  systems  not  stated  In 
(3) ,  above,  do  not  require  advance  pub¬ 
lication,  but  must  be  submitted  for  inclu¬ 
sion  in  the  annual  consolidated  listing  of 
records  systems.  Accordingly,  each  DoD 
Component  shall  establish  procedures  to 
ensure  that  all  such  changes  are  forward¬ 
ed  for  submission  to  OASD(C)  by  May 
31  of  each  year  for  annual  publication  in 
the  Federal  Register. 

(5)  Reports  concerning  new  and 
changed  systems.  Concurrently  with  (2) 
and  (3),  above,  OASD(C)  shall  provide 
the  Office  of  Management  and  Budget 
and  the  Privacy  Protection  Study  Com¬ 
mission  advanced  notice  of  proposals  to 
establish  new  systems  or  to  change  rou¬ 
tine  uses  of  existing  systems. 

(6)  DoD  component  issuances.  Each 
DoD  Component  shall  ensure  that  infor¬ 
mation  contained  in  each  system  notice, 
as  published  In  the  Federal  Register,  is 
Incorporated  or  otherwise  published  in 
DoD  Component  issuance  (s)  to  ensure 
uniform  system  use  and  maintenance. 
DoD  Components  shall  take  immediate 
action  to  either  publish  a  system  notice, 
or  discontinue,  any  system  of  records  not 
contained  in  an  internal  Issuance. 

(c)  Standards  of  accuracy .  (1)  Records 
used  by  a  DOD  Component  in  making 
determinations  about  an  Individual  will 
be  maintained  with  such  accuracy,  rele¬ 
vance,  timeliness  and  completeness  as  is 
reasonably  necessary  to  ensure  fairness 
to  the  individual  in  any  determination,  j 
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(2)  Prior  to  disseminating  any  record 
about  an  individual  to  any  person  other 
than  a  Federal  agency  unless  the  dis¬ 
semination  is  made  pursuant  to  the 
Freedom  of  Information  Act,  reasonable 
efforts  will  be  made  to  ensure  that  such 
records  are  accurate,  complete,  timely, 
and  relevant  for  agency  purposes. 

(d)  Restriction  on  maintenance  of 
certain  records.  Maintenance  of  a  system 
of  records  describing  how  individuals  ex¬ 
ercise  rights  guaranteed  by  the  First 
Amendment  are  prohibited  unless  ex¬ 
pressly  authorized  by  Federal  Statute  or 
by  the  individual  concerned,  unless  per¬ 
tinent  to  and  within  the  scope  of  an  au¬ 
thorized  law  enforcement  activity.  The 
exercise  of  these  rights  includes,  but  is 
not  limited  to,  religious  and  political  be¬ 
liefs,  freedom  of  speech  and  the  press, 
and  the  right  of  assembly  and  to  petition. 

(e)  Rules  of  conduct.  The  head  of  each 
DoD  Component  shall  assure  that  per¬ 
sons,  including  government  contractors 
or  their  employees,  involved  in  the  de¬ 
sign,  development,  operation,  mainte¬ 
nance  or  contol  of  any  system  of  records, 
as  defined  in  S286a.6,  are  informed  of 
all  requirements  to  protect  the  privacy 
of  the  individuals  who  are  subjects  of 
the  records.  The  following  sanctions 
should  be  emphasized  to  personnel : 

(1)  There  are  criminal  penalties  for 
knowingly  and  willfully  disclosing  a  rec¬ 
ord  about  an  individual  without  the 
written  consent  or  the  written  request 
of  that  Individual,  or  unless  disclosure 
is  for  one  of  the  reasons  listed  in 
§  286a. 10. 

(2)  The  DoD  Component  may  be  sub¬ 
ject  to  civil  suit  for  failure  to  comply 
with  the  Privacy  Act. 

(f)  Safeguarding  personal  informa¬ 
tion  in  records  systems. 

(1)  Each  DoD  Component  shall  estab¬ 
lish  administrative  and  physical  safe¬ 
guards  to  protect  each  system  of  rec¬ 
ords  from  unauthorized  or  unintentional 
access,  disclosure,  modification  or  de¬ 
struction.  These  safeguards  shall  apply 
to  systems  of  records,  in  whatever  medi¬ 
um  in  wrhich  personal  information  is 
processed  or  stored.  Such  safeguards 
shall  be  tailored  to  the  requirements  of 
each  system  of  records. 

(2)  Access  to  personal  information 
shall  be  restricted  to  those  persons  whose 
official  duties  require  access  and  the  in¬ 
dividual  concerned  and  in  accordance 
with  5  286a. 8. 

(3)  Each  DoD  Component  shall  ensure 
that  all  persons  whose  official  duties  re¬ 
quire  access  to  or  processing  and  main¬ 
tenance  of  personal  information  are 
trained  in  the  proper  safeguarding  and' 
use  of  such  information. 

(4)  Personal  records  and  documents 
shall  be  stored  so  as  to  reasonably  pre¬ 
clude  unauthorized  disclosure. 

(5)  Disposal  of  records  containing 
personal  information  which  are  no  longer 
required  will  be  accomplished  in  such  a 
manner  that  will  prevent  the  contents 
from  being  disclosed  (e.g.  tearing  or 
shredding  the  record  into  pieces  or  burial 
or  in  the  case  of  magnetic  tapes  by 
degaussing) . 


§  286a.  12  Instructions  for  preparation 
of  record  system  notices. 

(a)  General  instructions.  (1)  For  each 
system  of  records  submit  information  in 
the  sequence  as  shown  in  (b),  below. 
Show  in'  this  sequence  even  though  an 
entry  may  not  be  required  for  all  items. 

(2)  Use  keywords  shown  below  (i.e., 
sysname,  record-category,  etc.)  Expla¬ 
nations  of  keywords  are  shown  in  paren¬ 
theses,  but  do  not  use. 

(3)  Do  not  use  paragraph  or  subpara¬ 
graph  numbers  or  letters. 

(4)  Do  not  underline  any  part  of  the 
text. 

(5)  Do  not  use  hyphenation  at  the  end 
of  a  line  or  subdivide  a  word  at  the  end 
of  a  line. 

(6)  Do  not  reference  information  from 
other  parts  within  the  system  of  records 
being  described. 

(7)  Use  all  standard  typewriter  char¬ 
acters  except  for  the  following  which  will 
be  used  as  indicated: 

(i)  Use  “+"  to  precede  each  major 
group  keyword  (e.g.,  plus  sysname,  etc.) . 

( ii)  Use  “  *  ”  to  precede  each  major  sub¬ 
group  keyword  (e.g.  •  safeguards,  etc.). 
The  V  used  in  original  Privacy  Act  sub¬ 
mission  instructions  is  no  longer  valid. 

(iii)  Use  “$”  to  precede  the  text  follow¬ 
ing  each  major  group  or  subgroup  head¬ 
ings.  Do  not  use  subparagraphs. 

(iv)  Use  “%”  to  precede  each  line  en¬ 
try  when  names,  addresses,  ete.,  require 
a  column  or  list  format.  Multiple  ad¬ 
dresses  or  listings  within  a  single  column 
are  not  permitted.  In  instances  where 
more  than  one  address  or  list  is  required, 
enter  all  addresses  or  lists  in  paragraph 
form,  from  left  to  right  across  the  page. 

(v)  Do  not  use  “=”  character.  It  is 
reserved  for  other  purposes. 

(8)  All  information  will  be  typed  flush 
with  the  left  margin,  using  the  characters 
indicated  in  (7)  above  to  distinguish  be¬ 
tween  major  groupings  of  information 
and  paragraphs. 

(9)  Refer  to  paragraph  (c)  of  this  sec¬ 
tion  for  systems  which  may  qualify  for 
emption. 

(10)  Number  the  pages  separately  for 
each  draf  t  system  notice . 

(11)  New  and  revised  system  notices 
shall  be  prepared  in  accordance  with 
the  initial  Privacy  Act  submission  in¬ 
structions  as  modified  by  this  section.  All 
notices  are  to  be  submitted  in  full  (l.e.  no 
partial  system  notices  shall  be  accepted) . 

(b)  Sequence  of  submissions  and  in¬ 
structions.  (1)  Manual  or  Automated. 
Indicate  whether  the  system  is  manual 
or  automated.  An  automated  system 
would  include  records  processed,  main¬ 
tained,  or  both,  in  a  machine  readable 
medium,  such  as  EAM  Cards,  computer 
tapes,  or  disks,  word  processing  tapes  and 
cards,  etc.  A  manual  system  would  in¬ 
clude  records  processed,  maintained,  or 
both,  in  a  human  readable  medium  such 
as  paper  records  in  file  folders,  visible 
or  vertical  file  cards,  microfiche,  roll 
microfilm,  photographs,  etc.  A  mecha¬ 
nized  file  which  requires  substantial  hu¬ 
man  intervention  for  processing  or  main¬ 
tenance  is  considered  to  be  manual, 
rather  than  automated. 


(2)  System  name  (sysname).  When¬ 
ever  applicable,  identify  the  system  by 
number  and  title  prescribed  in  your  files 
or  records  disposition  manual.  Use  lo¬ 
cally  originated  titles  for  files  which  are 
not  described  specifically  and  adequately 
in  the  manual  or  which  are  otherwise 
unique  to  the  reporting  office.  If  more 
than  one  system  is  covered  by  a  file 
description,  identify  each  system.  If  sev¬ 
eral  files  (separately  described  in  your 
manual)  are  a  part  of  a  single  system 
identify  the  system  only  (see,  below,  for 
identification  of  separate  files  which 
form  a  system) .  Provide  system  and  file 
title  in  unclassified  form.  Do  not  use 
abbreviations,  nicknames,  or  acronyms 
unless  spelled  out  the  first  time  used. 
Place  acronyms  in  parentheses  immedi¬ 
ately  following  the  title. 

(3)  Security.  Specify  the  Defense  or 
other  security  classification  for  the  sys¬ 
tem  of  records  if  classified  pursuant  to 
the  provisions  of  DOD  5200. 1-P  (32  CFR, 
159),  and  implementing  directives.  Do 
not  cite  as  a  classification  “Internal 
Working  Paper,  Eyes  Only,”  or  similar 
marking  used  for  internal  control  or 
other  handling  purposes.  If  unclassified, 
including  FOR  OFFICIAL  USE  ONLY, 
state  unclassified. 

(4)  Location.  If  the  system  is  main¬ 
tained  in  a  single  location,  provide  the 
exact  name  of  the  office,  organization, 
and  correspondence  or  routing  symbol. 
On  the  other  hand,  if  it  is  geographically 
or  organizationally  decentralized,  specify 
each  type  of  organization  or  element  that 
maintains  a  segment  of  the  system.  For 
example,  if  the  system  was  comprised 
of  clinical  records,  then  medical  centers 
and  hospitals,  and  the  National  Person¬ 
nel  Records  Center  would  be  listed  as 
locations.  Where  automated  data  sys¬ 
tems  encompass  a  central  computer  fa¬ 
cility,  with  input/output  terminals  at 
several  geographical  locations,  list  by 
category  each  location  under  this  head¬ 
ing.  In  all  instances  where  multiple  loca¬ 
tions  are  referred  to  by  type  of  organi¬ 
zation,  state  that  official  mailing  ad¬ 
dresses  are  in  the  Department  of  De¬ 
fense  Directory  in  the  appendix  to  the 
Component’s  systems  notice.  However,  in 
all  cases,  give  the  official  mailing  ad¬ 
dress  if  the  office  maintaining  the  sys¬ 
tem  is  not  listed  in  the  Federal  Register. 
If  the  address  is  classified,  so  state.  Be 
sure  to  list  each  type  of  organization 
maintaining  a  segment  or  duplicate  of 
the  system,  since  maintenance  by  a  type 
of  organization  not  reported  herein  will 
constitute  a  violation  of  the  Privacy  Act 
of  1974.  When  indicating  domestic  ad¬ 
dresses,  use  the  United  States  Postal 
Service  two  letter  State  abbreviation  and 
the  Zip  Code. 

(5)  Individual  category.  (Categories 
of  individuals  covered  by  the  system). 
The  purpose  of  this  requirement  is  to 
permit  an  individual  to  determine 
whether  or  not  information  on  him 
might  be  in  the  system  of  records.  Cate¬ 
gories  of  individuals,  therefore,  should 
be  stated  in  easily  understood,  non -tech¬ 
nical  terms  and  include  all  categories  of 
individuals  on  whom  records  are  main¬ 
tained.  Avoid  using  broad  general  de- 
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scriptions,  such  as  "all  military  person¬ 
nel,”  unless  the  system  applies  to  all 
military  personnel.  For  example,  the 
Joint  Uniform  Military  Pay  System 
(JUMPS)  applies  to  all  military  person¬ 
nel  on  active  duty,  while  a  system  of 
absentee  case  flies  would  apply  only  to 
deserters  and  escaped  prisoners.  All  cate¬ 
gories  of  individuals  included  in  the  sys¬ 
tem  must  be  listed,  regardless  of  the 
frequency  of  inclusion  or  the  number  of 
records  involved.  (All  future  changes 
to  the  system,  which  broaden  or  increase 
the  categories  of  individuals  covered,  will 
require  preparation  and  publication  of 
a  revised  public  notice  in  the  Federal 
Register.) 

(6)  Record  category.  ( Categories  of 
records  in  the  system ).  Briefly  describe 
in  non-tec hnical  terms  all  types  of  rec¬ 
ords  in  the  system.  For  example,  under 
JUMPS,  the  types  of  records  will  include, 
but  not  be  limited  to,  individual  military 
pay  records  and  substantiating  docu¬ 
ments,  such  as  certificates  for  deductions 
and  retained  military  pay  orders  and 
records  of  travel  payments;  financial 
record  data  folders;  miscellaneous  mili¬ 
tary  vouchers;  laundry  and  dry  cleaning 
statement;  copies  of  morning  or  strength 
reports  or  other  rosters;  and  personal 
financial  records.  For  automated  systems, 
do  not  list  source  documents  unless  they 
are  retained  and  filed  by  name,  SSN,  or 
other  individual  Identifier.  Instead,  list 
the  categories  of  information  stored  in 
the  system.  Be  sure  to  include  all  types 
records  in  the  system,  regardless  of  their 
frequency  or  volume  of  accumulation, 
since  future  additions  of  new  types  of 
records  will  require  preparation  and  pub¬ 
lication  of  revised  public  notices  in  the 
Federal  Register. 

(7)  Authority.  ( Authority  for  mainte¬ 
nance  of  the  system ).  Cite  the  specific 
provision  of  a  Federal  statute  or  Execu¬ 
tive  Order  of  the  President,  including  the 
title  thereof,  which  authorizes,  or  pro¬ 
vides  a  legal  basis  for,  maintenance  of 
the  system.  Do  not  cite  regulations.  In 
this  connection,  authority  for  a  system 
may  be  derived  from  a  statute  or  Execu¬ 
tive  Order  which : 

(i)  Explicitly  authorizes  or  directs  the 
component  to  maintain  a  system  of  rec- 
cords. 

(ii)  Authorizes  or  directs  the  compo¬ 
nent  to  perform  a  function,  the  discharge 
of  which  requires  maintenance  of  the 
system  of  records. 

Note:  Check  with  the  appropriate  Judge 
advocate  or  legal  officer  for  assistance  in 
determining  the  statutory  or  regulatory  basis 
for  the  system. 

(8)  Routine-uses.  ( Routine  uses  of 
records  maintained  in  the  system,  includ¬ 
ing  categories  of  users  and  the  purposes 
of  such  uses.) 

(i)  Essentially,  this  requirement  calls 
for  the  following  Information  in  non¬ 
technical  terms: 

(a)  The  purpose  (s)  for  which  infor¬ 
mation  in  the  system  is  collected. 

(b)  Each  category  of  user. 

(c)  The  specific  use(s)  made  of  the  in¬ 
formation  by  each  user. 
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(ii)  Each  category  of  user  and  each 
use  must  be  reported.  Any  proposed  new 
use  or  category  of  user,  or  change  in  an 
existing  use,  which  has  the  effect  of  ex¬ 
panding  the  availability  of  the  informa¬ 
tion  in  the  system,  will  require  publica¬ 
tion  of  a  revised  notice  in  the  Federal 
Register.  Any  such  proposed  change  in 
a  routine  use  must  also  be  described  in 
an  advanced  notice  in  the  Federal  Reg¬ 
ister  to  permit  30  days  for  public  com¬ 
ment  before  it  is  implemented.  As  de¬ 
fined  by  5  U.S.C.  552a,  the  term  "routine 
use”  means  with  respect  to  the  disclosure 
of  a  record,  the  use  of  such  record  for 
a  purpose  which  is  compatible  with  the 
purpose  for  which  it  was  collected. 

(iii)  “Uses”  can  be  distinguished  from 
"purposes”  in  that  “purposes”  describe 
the  objectives  for  collecting  or  maintain¬ 
ing  information.  “Uses”  are  the  specific 
ways  or  processes  in  which  the  infor¬ 
mation  is  employed,  including  the  per¬ 
sons  or  organizations  to  whom  the  record 
may  be  disclosed.  For  example,  the  pur¬ 
poses  for  collecting  information  may  be 
to  evaluate  an  application  for  a  veteran’s 
benefit  and  to  issue  checks.  Uses  may  in¬ 
clude  verification  of  certain  information 
with  the  appropriate  Military  Service 
and  release  of  check  data  to  the  Treas¬ 
ury  Department.  List  under  routine  uses 
if  contractors  are  engaged  to  perform 
a  service,  such  as  key  punch,  optical  scan, 
or  telecommunications  in  connection 
with  the  operation  of  an  automated  data 
system.  List  also  Federal  agencies  to 
which  personal-type  information  is  dis¬ 
closed,  including  automated  system  inter¬ 
faces,  and  the  purposes  for  which  the 
disclosures  are  made. 

(iv)  Each  proponent  of  a  system  (i.e., 
that  office  or  organization  proposing,  di¬ 
recting,  or  otherwise  responsible  for  the 
system)  must  prescribe  the  “routine” 
uses  of  the  records.  Routine  use  does  not 
merely  encompass  the  common  and 
ordinary  uses  to  which  records  are  put, 
but  also  Includes  all  of  the  proper  and 
necessary  uses  regardless  of  frequency. 
For  example,  individual  income  tax  re¬ 
turns  are  routinely  used  by  the  Internal 
Revenue  Service  to  audit  the  amount  of 
tax  due  and  for  assistance  on  collection 
of  such  tax  by  civil  proceedings.  They 
are  used  less  often,  however,  for  referral 
to  the  Department  of  Justice  for  possible 
criminal  prosecution  of  fraud  or  tax  eva¬ 
sion.  Therefore,  the  “routine”  use  of  such 
records  will  include  referrals  to  the  De¬ 
partment  of  Justice.  In  addition,  descrip¬ 
tion  of  “routine  use”  shall  include  the 
fact  that  any  individual  records  in  a  sys¬ 
tem  of  records  may  be  transferred  to  any 
component  of  the  Department  of  De¬ 
fense.  It  shall  be  expected  normally  that 
“routine  use”  Will  include  disclosure  to 
law  enforcement  or  investigatory  au¬ 
thorities  for  investigation  and  possible 
criminal  prosecution,  civil  court  action, 
or  regulatory  order. 

(9)  Policy-practice.  ( Policies  and 
practices  for  storing,  retrieving,  acces¬ 
sing,  retaining,  and  disposing  of  records 
in  the  system) .  Describe  how  records  in 
the  system  are  managed  during  their 
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life-cycle.  When  feasible,  extract  per¬ 
tinent  information  from  your  files  or 
records  disposition  manual. 

(i)  Storage.  In  describing  records  stor¬ 
age,  specify  the  medium  in  which  they 
are  maintained,  such  as  paper  records  in 
file  folders,  visible  or  vertical  file  cards, 
computer  magnetic  tapes,  or  disks,  com¬ 
puter  paper  printouts,  aperture  cards, 
microfiche,  roll  microfilm,  photographs, 
video-tape,  etc. 

(ii)  Retrievability.  Specify  how  in¬ 
formation  is  accessed  and  retrieved,  such 
as  by  name,  social  security  account  num¬ 
ber  (SSAN) ,  military  service  number  or 
other  identification  number,  classifica¬ 
tion  or  personal  characteristics,  such  as 
fingerprint  classification,  voice  print 
identifier,  etc.  Indicate  further  whether 
conventional  or  computerized  indices  are 
required  to  retrieve  individual  records 
from  the  system. 

(iii)  Safeguards.  Describe  what  meas¬ 
ures  are  taken  to  prevent  unauthorized 
disclosure  of  the  records  and  state  the 
categories  of  individuals  authorized  ac¬ 
cess  to  the  records.  Specify  system  safe¬ 
guards,  such  as  safes,  vaults,  locked  cab¬ 
inets  or  rooms,  guards,  personnel 
screening,  visitor  registers,  computer 
“failsafe”  systems  software,  etc. 

Note:  Do  not  describe  security  safeguards 
In  such  detaU  as  to  increase  the  risk  of  un¬ 
authorized  access  to  the  records. 

(iv)  Retention,  (.retention  and  dis¬ 
posal)  .  State  rules  on  how  long  the  rec¬ 
ords  are  to  be  maintained;  if  and  when 
they  are  moved  to  Federal  Records  Cen¬ 
ters  or  the  National  Archives  or  other  de¬ 
signated  depository;  and  if,  when,  and 
how  they  are  destroyed  or  otherwise  dis¬ 
posed  of.  Changes  in  this  item  will  not 
normally  require  immediate  publication 
of  a  revised  public  notice  unless  they  re¬ 
flect  an  expansion  in  the  availability  of 
or  access  to  the  system  of  records. 

(10)  Systems  manager  (Sysmanager) . 
(Title  and  duty  address  of  the  agency  of¬ 
ficials  responsible  for  the  system).  In  all 
cases,  enter  the  title  of  the  official  who 
is  responsible  for  policies  and  procedures 
governing  the  system,  i.e.,  DCS  Person¬ 
nel,  Hq.,  USA  and  USAF;  Chief  of  Naval 
Personnel;  etc.  If  the  title  of  the  official 
is  unknown  (such  as  for  locally  evolved 
systems) ,  specify  the  commander  or  of¬ 
fice  head  as  the  responsible  official.  In 
addition,  for  geographically  or  organiza¬ 
tionally  decentralized  systems,  where  in¬ 
dividuals  may  deal  directly  with  agency 
officials  at  each  location  to  exercise  their 
rights  under  the  Privacy  Act  of  1974, 
give  the  position  or  duty  title  of  each 
category  of  official  responsible  for  the 
system  or  a  segment  thereof.  For  ex¬ 
ample,  in  the  case  of  clinical  records, 
the  entries  would  be:  The  Surgeon  Gen¬ 
eral,  USA  or  USAF,  or  Chief,  Bureau  of 
Medicine  and  Surgery  (USN) ,  comman¬ 
ders  of  medical  centers  and  hospitals, 
and  the  Director,  National  Personnel 
Records  Center,  111  Winnebago  St.,  St. 
Louis  MO  63118.  Do  not  include  the  duty 
address  if  already  listed  in  organizational 
directories  mentioned  in  (b)  (4)  of  this 
section. 
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(11)  Notification.  ( Procedure  where¬ 
by  individuals  can  be  notified  at  their 
request  if  the  system  contains  records 
: pertaining  to  them). 

(i)  Indicate  whether  or  not  requests 
from  Individuals  should  be  addressed  to 
the  above  SYSMANAGER,  as  In  *10)  of 
this  paragraph.  If  requests  are  to  be  ad¬ 
dressed  to  any  other  officials,  list  them  by 
duty  or  position  titles. 

(11)  Specify  what  information  will  be 
required  from  the  requesting  Individual 
to  determine  whether  or  not  the  system 
contains  a  record  about  him  such  as 
full  name,  military  status,  SSN  or  serv¬ 
ice  number,  resident  or  nonresident,  etc. 

(iii)  List  by  specific  name,  or  cate¬ 
gories,  those  offices  which  the  requestor 
may  visit  to  obtain  Information  on 
whether  or  not  the  system  contains  rec¬ 
ords  pertaining  to  him. 

(iv)  For  personal  visits,  specify  what 
data  the  requestor  must  present  as  proof 
of  identity,  such  as  a  combination  of 
full  name,  date  and  place  of  birth,  par¬ 
ents’  names,  driver’s  license,  medicare 
card,  etc.  Do  not  require  verification  of 
Identity  for  records  which  are  disclosable 
under  the  Freedom  of  Information  Act. 

(12)  Access.  ( Procedures  whereby  an 
individual  can  be  notified  at  his  request 
how  he  can  gain  access  to  any  record 
pertaining  to  himself  contained  in  the 
system  of  records).  Include  the  title  or 
category  of  officials  who  can  provide  as¬ 
sistance,  If  those  officials  are  other  than 
the  SYSMANAGER.  If  the  mailing  ad¬ 
dresses  are  listed  In  the  organizational 
directory,  state  that  official  mailing  ad¬ 
dresses  are  in  the  Department  of  Defense 
Directory  In  the  appendix  to  the  Com¬ 
ponent’s  systems  notice.  Specific  loca¬ 
tions  and  telephone  numbers  of  offices 
may  be  Indicated  for  unique  or  central¬ 
ized  systems. 

(13)  Contest.  ( Rules  for  access  and 
contesting  contents  of  records) .  To  com¬ 
ply  with  this  requirement,  merely,  state : 
“The  agency’s  rules  for  access  to  records 
and  for  contesting  contents  and  appeal¬ 
ing  Initial  determinations  by  the  Indi¬ 
vidual  concerned  may  be  obtained  from 
the  Sysmanager.” 

(14)  Source.  ( Categories  of  sources  of 
records  in  the  system) .  List  by  type  each 
source  of  Information  In  the  system,  eg., 
previous  employers,  financial  institu¬ 
tions,  educational  Institutions,  trade  as¬ 
sociations,  automated  system  interfaces, 
etc.  Specific  Individuals  or  institutions 
need  not  be  identified  by  name.  Also,  do 
not  list  as  a  source  individuals  who  pro¬ 
vided  information  on  themselves.  Again, 
be  sure  to  include  all  types,  since  collec¬ 
tion  of  information  from  types  of  sources 
other  than  those  listed  will  require  pub¬ 
lication  of  a  revised  public  notice  in  the 
Federal  Register— before  any  informa¬ 
tion  is  collected  from  those  sources. 

(c)  Systems  qualified  and  proposed  for 
promotion 

(1)  Generally,  the  following  records 
may  be  exempted  from  the  provisions  of 
(b)  (11),  (12).  (13),  and  (14)  of  this 
section  (subsection  (e)  (4)  (G) ,  (H)  and 
(I)  of  the  Privacy  Act  of  1974:  records 
maintained  by  the  Central  Intelligence 


Agency;  records  compiled  to  ensure  pro¬ 
tection  of  the  President  or  other  officials, 
classified  records,  records  required  by 
statute  to  be  maintained  and  used  solely 
as  statistical  records;  investigatory  rec¬ 
ords  compiled  solely  for  the  purpose  of 
determining  suitability,  eligibility,  or 
qualifications  for  Federal  civilian  em¬ 
ployment,  military  service.  Federal  con¬ 
tracts,  or  access  to  classified  information, 
but  only  to  the  extent  as  outlined  in  sub¬ 
section  (k)  (5)  of  the  Privacy  Act  of 
1974;  certain  testing  and  examination 
material;  and  certain  material  used  to 
evaluate  potential  for  promotion  in  the 
Armed  Services.  All  items  in  paragraph 
(b)  of  this  section  will  be  completed  for 
systems  proposed  for  exemption,  except 
for  (b)  (11),  (12),  (13)  and  (14)  of  this 
section. 

(2)  Cite  the  system  name  and  specific 
provisions  of  the  Privacy  Act  of  1974, 
from  which  the  system  is  to  be  exempted 
and  the  reasons  therefore.  Consult  with 
the  legal  staff  for  detailed  guidance  for 
systems  which  may  be  eligible  for  ex¬ 
emption.  Proponents  of  systems  dealing 
with  the  above  types  of  records  should 
contact  the  Departmental  Records  Man¬ 
agement  staff  (HQ  DAAG-AMR;  HQ 
USAF/DAD;  Chief  of  Naval  Operations 
(OP-09B1) ;  or  appropriate  comparable 
Defense  component  records  management 
staff  for  additional  guidelines,  if  neces¬ 
sary,  for  preparing  exemption  notices  for 
publication  in  the  Federal  Register. 
(Note:  No  system  of  records  is  exempted 
from  the  public  notice  requirements  of 
the  Privacy  Act  of  1974.)  Failure  to  pub¬ 
lish  such  a  notice  constitutes  a  criminal 
violation. 

§  286a. 13  Effective  date  and  implemen¬ 
tation. 

(a)  This  Part  is  effective  September 
27,  1975. 

(b)  DoD  Components  shall  issue  regu¬ 
lations  to  carry  out  the  policies  set  forth 
in  this  Part.  Two  copies  of  the  imple¬ 
menting  regulations  shall  be  forwarded 
to  the  Assistant  Secretary  of  Defense 
(Comptroller) . 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives,  OASD  (Comptroller) . 

August  14,  1975. 

[FR  Doc.75-22215  Filed  8-25-75;8:45  ami 

Office  of  the  Secretary 
[32  CFR  Part  286b] 

PERSONAL  PRIVACY  AND  RIGHTS  OF  IN¬ 
DIVIDUALS  REGARDING  THEIR  PER¬ 
SONAL  RECORDS 

Notice  of  Proposed  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (Pub.  L.  93-579) ;  88  Stat.  1896,  5 
U.S.C.  552a)  which  requires  each  Federal 
Agency  that  maintains  any  systems  of 
records  as  defined  in  the  statute  to  pro¬ 
mulgate  rules  pursuant  to  the  provisions 
of  the  Act. 

Notice  is  hereby  given  that  the  Office 
of  the  Secretary  of  Defense  proposes  to 
add  Part  286b  to  implement  the  provi¬ 


sions  of  the  Privacy  Act  of  1974.  Part 
286b  establishes  the  proposed  rules  for 
the  protection  of  personal  privacy  of  in¬ 
dividuals  Identified  in  records  main¬ 
tained  by  the  Office  of  the  Secretary  of 
Defense  and  the  Joint  Chiefs  of  Staff, 
and  Implements  Department  of  Defense 
Directive  5400.11(32  CFR  286a)  which 
applies  to  all  DoD  Components.  This  pro¬ 
posed  Part  286b  applies  to  all  Office  of 
the  Secretary  of  Defense  activities.  Sig¬ 
nificant  portions  of  these  documents  pro¬ 
vide  the  procedures  for  requests  for  in¬ 
formation,  access  to  and  disclosure  of 
records,  and  the  actions  to  be  taken  by 
the  Office  of  the  Secretary  of  Defense 
In  response  to  such  requests.  Part  286b 
further  contains  provisions  for  account¬ 
ing  of  disclosures,  requests  for  amend¬ 
ment  of  a  record,  and  appeals  from  re¬ 
fusal  to  amend  a  record.. 

In  addition,  sections  5  UJ5.C.  552a(j) 
and  (k)  authorize  an  agency  head  to 
exempt  certain  systems  of  records  or 
parts  of  certain  systems  from  some  of 
the  requirements  of  the  Act.  Part  286b 
reserves  to  the  Secretary  of  Defense,  as 
Head  of  an  Agency,  the  right  to  create 
exemptions  pursuant  to  the  exemption 
provisions  of  the  Act.  Part  286b.ll  con¬ 
tains  those  general  and  specific  exemp¬ 
tions  proposed  by  the  Office  of  the  Sec¬ 
retary  of  Defense. 

Any  person  Interested  In  the  rules 
proposed  herein  may  participate  in  this 
proposed  rulemaking  by  submitting 
either  in  person  or  through  the  mall 
written  data,  views,  or  arguments  to  the 
Deputy  Assistant  Secretary  of  Defense 
(Administration),  Room  3E827,  The 
Pentagon,  Washington,  D.C.  20301,  on  or 
before  September  25,  1975. 

This  proposal  will  apply  to  other  pos¬ 
sible  systems  of  records  set  up  in  the 
future,  as  applicable. 

Therefore,  pursuant  to  5  U.S.C.  553, 
subsections  3  and  4  of  the  Administra¬ 
tive  Procedure  Act,  and  to  the  Privacy 
Act  of  1974,  Title  32  of  the  Code  of  Fed¬ 
eral  Regulations  Part  286b  is  proposed  as 
set  forth  below: 

Bee. 

286b. 1  Purpose. 

286b  .2  Applicability  and  scope. 

286b.3  Policy. 

288b.4  Responsibilities  and  functions. 
286b.5  Procedures. 

286b. 6  Reports  required  and  submission 
dates. 

286b. 7  Definitions. 

286b.8  Systems  of  records. 

286b. 9  Instruction  for  preparation  of 
records  system  notices. 

286b. 10  Format  of  four  points  required  on 
forms  requesting  personal  Infor¬ 
mation. 

286b.  11  Procedures  for  exemptions. 

286b. 12  Effective  date  and  implementation. 

§  286b.  1  Purpose. 

This  part: 

(a)  Implements  the  Privacy  Act  of 
1974  (Public  Law  No.  93-579,  5  U.S.C. 
552a) ,  and  supplements  the  OMB  Guide¬ 
lines,  Circular  A-108,  July  1,  1975,  and 
DoD  Directive  5400.11,  (32  CFR  286a) 
which  require  the  Offices  of  the  Secretary 
of  Defense  and  those  organizations  as¬ 
signed  to  OSD  for  administrative  sup¬ 
port  to: 
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(1)  Assure  that  personal  Information 
about  individuals  collected  in  OSD  Com¬ 
ponents  is  limited  to  that  which  is  legally 
authorized  and  necessary,  and  is  main¬ 
tained  in  a  manner  which  assures  its 
confidentiality; 

(2)  Establish  policies  and  procedures 
for  effective  administration  of  the  Pri¬ 
vacy  Act  program; 

(3)  Establish  procedures  for  reviewing 
a  denial  for  access  to  records  or  for  the 
correction  of  a  record. 

§  286b.2  Applicability  and  scope. 

The  provisions  of  this  Part  apply  to  the 
Office  of  the  Secretary  of  Defense,  The 
Organization  of  the  Joint  Chiefs  of  Staff, 
and  other  activities  assigned  to  OSD  for 
administrative  support  (hereinafter  re¬ 
ferred  to  collectively  as  ‘‘OSD  Compo¬ 
nents").  It  covers  all  record  systems 
maintained  by  OSD  Components;  and 
governs  the  collection,  maintenance,  use, 
dissemination,  access,  change  and  re¬ 
lease  of  information  contained  in  OSD 
Components’  records  systems  which  in¬ 
volve  or  concern  any  individual. 

§  286.3  Policy. 

(a)  The  policy  of  the  Department  of 
Defense  is  to  protect  the  privacy  of  in¬ 
dividuals  involved  in  any  phase  of  the 
personnel  management  process  and  to 
permit  any  individual  to  know  what  rec¬ 
ords  exist  pertaining  to  him  in  the  Office 
of  the  Secretary  of  Defense,  as  well  as  in 
those  organizations  assigned  to  the  OSD 
for  administrative  support. 

(b)  Each  office  maintaining  records 
and  information  about  an  individual  will 
ensure  that  the  privacy  of  any  individual 
concerned  is  protected  from  unauthor¬ 
ized  disclosure,  and  permit  each  individ¬ 
ual  to  have  access  to,  and  have  a  copy 
made  of,  all  or  any  portion  of  such  rec¬ 
ords  which  pertain  to  him,  (except  those 
referred  to  in  paragraphs  §  286b.5(c) 
(16)  and  §  286b.ll),  and  to  have  an  op¬ 
portunity  to  request  that  such  records  be 
amended  as  provided  by  the  Privacy  Act 
of  1974. 

(c)  The  Heads  of  OSD  Components 
shall  collect,  maintain,  use,  or  dissem¬ 
inate  any  record  of  an  identifiable  per¬ 
sonal  nature  in  a  manner  which  assures 
that  such  action  is  necessary  and  law¬ 
ful;  that  any  information  collected  is 
as  accurate,  relevant,  timely,  and  com¬ 
plete  as  is  reasonably  necessary  to  assure 
fairness  to  the  individual;  and  that  ade¬ 
quate  safeguards  are  provided  to  prevent 
misuse  or  unauthorized  release  of  such 
information. 

§  286h.  1  Responsibilities  and  functions. 

(a)  The  Deputy  Assistant  Secretary 
of  Defense  (Administration)  shall:  . 

(1)  Direct  and  administer  the  Depart¬ 
ment  of  Defense  Privacy  Act  program 
for  OSD  Components. 

(2)  Establish  standards  and  proce¬ 
dures  to  assure  compliance  with  and 
implementation  of  the  Privacy  Act  of 
1974  and  DoD  Directive,  5400.11  (32  CFR 
286a) . 

(3)  Be  responsible  for  serving  as  the 
appellate  level  within  OSD  in  those  in¬ 
stances  in  which  a  requester  seeks  re¬ 
consideration  of  a  previously  denied 


request  or  initiates  legal  action  to  compel 
the  release  or  correction  of  a  record. 

(4)  Evaluate  and  decide,  in  coordina¬ 
tion  with  the  General  Counsel,  appeals 
resulting  from  denials  of  records  from 
OSD  Components. 

(5)  Designate  the  Records  Manage¬ 
ment  Branch,  Office  of  the  Deputy  As¬ 
sistant  Secretary  of  Defense  (Adminis¬ 
tration)  ,  OASD(C) ,  as  the  office  of  rec¬ 
ord  and  the  central  point -of  -  contact  for 
all  matters  pertaining  to  the  Privacy  Act 
program  both  for  OSD  Components  and 
individuals  requesting  information  and 
access  to  records  under  the  provisions  of 
the  Act.  As  such,  the  Records  Manage¬ 
ment  Branch  shall: 

(i)  Forward  requests  received  from  in¬ 
dividuals  to  the  appropriate  OSD  Com¬ 
ponent  having  primary  responsibility  for 
the  information  requested,  and  maintain 
suspenses  to  ensure  that  replies  are  made 
within  time  limits  established  in  DoD 
Directive  5400.11  (32  CFR  286a) . 

(ii)  Collect  any  fees  entailed  in  repro¬ 
ducing  requested  materials. 

(iii)  Provide  guidance  and  training  to 
organizational  entities  as  required  by  the 
Privacy  Act  and  OMB  Guidelines,  Cir¬ 
cular  A-108,  July  1,  1975,  and  DoD  Di¬ 
rective  5400.11  (32  CFR  286a). 

(iv)  Collect  and  consolidate  data  from 
OSD  Components  and  submit  an  Annual 
Report  to  the  Office  of  Management  and 
Budget  (OMB) ,  as  required  by  the  Pri¬ 
vacy  Act,  OMB  Guidelines,  Circular 
A-108,  July  1,  1975,  and  DoD  Directive 
5400.11  (32  CFR  286a). 

(v)  Coordinate  and  consolidate  infor¬ 
mation  for  reporting  all  records  systems, 
as  well  as  changes  to  approved  systems, 
to  the  OMB,  Congress,  and  Federal 
Register,  as  required  by  the  Privacy  Act 
and  OMB  Guidelines,  Circular  A-108, 
July  1,  1975,  and  DoD  Directive  5400.11 
(32  CFR  286a). 

(vi)  Collect  information  from  OSD 
Components  and  prepare  consolidated 
reports  required  by  the  Privacy  Act  and 
DoD  Directive  5400.11  (32  CFR  286a) . 

(b)  The  General  Counsel  shall: 

(1)  Coordinate,  as  appropriate,  with 
the  Department  of  Justice  all  final 
denials  of  appeals  for  requests  for 
records  when  litigation  is  likely. 

(2)  Provide  advice  and  assistance  to 
the  DASD(A)  as  may  be  required  in  the 
discharge  of  his  appellate  responsibilities. 

(3)  Provide  advice  and  assistance  to 
OSD  Components,  as  necessary,  in  legal 
matters  pertaining  to  the  Privacy  Act 
of  1974. 

(c)  The  Head  of  Each  OSD  Component 
shall : 

(1)  Designate  an  individual  as  the 
point-of-contact  for  Privacy  Act  mat¬ 
ters;  designate  an  official  authorized  to 
deny  initial  requests  for  an  individual’s 
records  or  changes  to  records;  and  advise 
the  DASD(A)  of  names  of  officials  so 
designated. 

(2)  Identify  all  systems  of  records  in 
his  organization,  as  required  by  the  Act, 
and  submit  the  data  as  indicated  in 
§  286b.5(a),  to  the  DASD(A)  no  later 
than  30  April  of  each  year. 

(3)  Report  any  new  records  systems,  or 
changes  to  an  existing  record  system  as 
indicated  in  286b.5(a)  (3),  to  the  DASD 
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(A)  at  least  90  days  prior  to  the  intended 
use  of  the  system. 

(4)  Review  all  contracts  which  pro¬ 
vide  for  the  maintenance  of  systems  of 
records  by  or  on  behalf  of  his  office  to 
assure — where  appropriate  and  within 
his  authority — that  language  is  included 
which  provides  that  such  systems  will  be 
maintained  in  a  manner  consistent  with 
the  Act. 

(5)  Revise  procurement  guidance  to 
Incorporate  language  consistent  with  the 
Act,  i.e.,  to  provide  that  any  contract 
which  provides  for  the  maintenance  of 
a  system  of  records  by  or  on  behalf  of 
his  office  includes  language  which  as¬ 
sures  that  such  'system  will  be  main¬ 
tained  in  conformance  with  the  Act. 

(6)  Revise  computer  and  telecom¬ 
munications  procurement  policies  to  pro¬ 
vide  that  agencies  must  review  all  pro¬ 
posed  contracts  for  equipment  and  serv¬ 
ices  to  assure  compliance  with  applicable 
provisions  of  the  Act,  e.g.,  Report  on  New 
Systems. 

(7)  Review  all  directives  which  require 
forms  or  other  methods  used  for  the  col¬ 
lection  of  information  about  individuals 
to  ensure  compliance  with  the  Privacy 
Act  of  1974.  (Refer  to  §  286b.5(e) .) 

(8)  Instruct  employees  who  deal  with 
Privacy  Act  matters  in  the  provisions 
of  this  Part  and"  DoD  Directive  5400.11, 
(32  CFR  286a) . 

(9)  Establish  administrative  systems 
in  his  organization  to  comply  with  the 
procedures  as  listed  in  §  286b.5  of  this 
Part. 

(10)  Provide  to  the  OSD  Records  Ad¬ 
ministrator  a  copy  of  the  record  request¬ 
ed  and  a  statement  of  reproduction 
charges  when  the  request  for  a  record  is 
approved.  (References  §  286b.5(c)  (14) 
and  §  286b.5(f) . 

(11)  Coordinate  with  the  Office  of  the 
General  Counsel  on  all  proposed  denials 
of  records. 

(12)  Provide  the  DASD(A),  when  a 
record  is  denied  in  whole  or  in  part,  the 
justification  for  such  denial.  (Reference 
5  286b.5(d)  (6).) 

(13)  Provide  the  record  to  the  DASD 
(A) ,  when  initial  denial  of  a  request  for 
such  record  has  been  appealed  by  the 
requester,  or  at  the  time  of  initial  denial 
when  appeal  seems  likely. 

(14)  Maintain  a  complete  and  accu¬ 
rate  record  of  the  administrative  pro¬ 
cedure  involved  in  any  denial  for  access 
to  a  record  or  for  the  correction  of  a 
record.  This  record  should  be  maintained 
so  that  it  can  be  readily  certified  as  the 
complete  administrative  record  of  the 
proceedings  as  a  basis  for  possible  use 
in  litigation.  (Refer  to  §  286b.5(f).) 

(15)  Refer  cases  to  the  DASD(A)  for 
review  and  evaluation  when  issues  raised 
are  of  unusual  significance,  precedent 
setting,  or  otherwise  require  special  at¬ 
tention  or  guidance. 

(16)  Establish  rules  of  conduct  to  as¬ 
sure  that  persons  involved  in  the  design, 
development,  implementation,  operation 
and  maintenance  of  any  system  of  rec¬ 
ords,  as  defined  in"?  286b.7:  (i)  are  cog¬ 
nizant  of  all  requirements  to  protect  the 
privacy  of  the  individuals  to  whom  the 
records  pertain;  and  (ii)  are  aware  that 
there  are  civil  and  criminal  penalties  for 
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knowingly  and  willfully  disclosing  a  rec¬ 
ord  about  an  individual  without  the  writ¬ 
ten  consent  or  written  request  of  that 
individual,  unless  such  disclosure  falls 
under  provisions  outlined  in  Exemptions. 
(Refer  to  §286b.5(f).) 

(17)  Forward  any  request  received  di¬ 
rectly  from  an  individual  to  the  OSD 
Records  Administrator  for  appropriate 
suspense  control  and  recording. 

(d)  The  Director  for  Space  Manage¬ 
ment  and  Services,  DASD(A)  shall: 

Upon  request  of  the  OSD  Records  Ad¬ 
ministrator  provide  the  necessary  au¬ 
tomated  services  through  the  Word  Proc¬ 
essing  Center  for  publication  of  data  in 
the  Federal  Register  as  required  by  the 
Privacy  Act  of  1974. 

(e)  The  Requester  is  responsible  for: 

1  (1)  Submitting  his  request  in  person 

at,  or  by  writing  to,  the  Office  of  the 
Records  Administrator,  Office  of  the  Sec¬ 
retary  of  Defense,  Room  5C315,  The  Pen¬ 
tagon,  Washington,  D.C.  20301. 

(2)  Establishing  his  identity  as  out¬ 
lined  In  S286b.5  (c)(3). 

(3)  Describing  the  record  sought  and 
providing  sufficient  information  to  en¬ 
able  the  material  to  be  located  with  a 
reasonable  amount  of  effort,  i.e.,  approx¬ 
imate  date  it  was  initiated;  originating 
organization;  type  of  document. 

|  (4)  Complying  with  the  procedures, 

as  provided  for  in  this  Instruction,  for 
inspecting  and/or  obtaining  copies  of 
requested  records. 

I  (5)  Paying  all  costs  associated  with 
reproducing  copies  of  requested  informa¬ 
tional  materials,  if  appropriate.  (See 
'  5  286b.5(g).) 

£  286b. 5  Procedures. 

I  (a)  Publication  of  annual  notices  in 
the  “Federal  Register .”  (1)  A  notice  of 
the  existence  of  any  records  system 
Which  meets  the  definition  of  a  system  of 
records  as  defined  in  $  286b. 7  shall  be 
published  annually  in  the  Federal  Reg¬ 
ister. 

(2)  Each  OSD  Component  will  submit 
a  report  of  its  records  systems  to  the 
DASD(A)  by  30  April  of  each  year.  This 
data  will  be  consolidated  by  the  DASD 
(A)  and  published  annually  in  the  Fed¬ 
eral  Register.  Instructions  on  its  content 
and  format  are  at  S  286b.8  and  §  286b.9. 

(3)  New  or  revised  records  systems. 
Each  OSD  Component  shall  provide  the 
DASD  (A)  with  90  days  advance  notice 
of  any  anticipated  new  or  revised  system 
of  records.  This  material  will  be  sub¬ 
mitted  to  the  OMB  and  Congress  at  least 
60  days  prior  to  use,  and  to  the  Federal 
Register  at  least  30  days  prior  to  being 
put  into  vise  in  order  to  provide  an  oppor¬ 
tunity  for  interested  persons  to  submit 
written  data,  views,  or  arguments  to  the 
OSD  Component.  Instructions  on  its  con¬ 
tent  and  preparation  are  at  §  286b. 8  (2) 
and  (3) ,  and  §  286b.9,  respectively. 

(b)  Annual  report.  (1)  Each  OSD  Com¬ 
ponent  shall  submit  in  six  copies  an  an¬ 
nual  report  by  March  31  of  each  year,  to 
the  DASD  (A) ,  covering  its  activities  for 
the  preceding  calendar  year  as  required 
by  the  Privacy  Act  of  1974.  These  reports 
will  be  consolidated  by  the  DASD  (A)  and 
an  overall  report  submitted  to  the  Office 
of  Management  and  Budget. 


(2)  The  annual  report  will  consist  of 
the  following: 

(i)  Overall  summary.  A  brief  manage¬ 
ment  summary  of  the  status  of  actions 
implementing  the  Act,  the  results  of 
these  efforts,  any  problems  encountered, 
and  recommendations  for  changes  in  leg¬ 
islation,  policies  or  procedures. 

(ii)  Accomplishments  and  projections. 
A  summary  of  major  accomplishments, 
i.e.,  improvements  in  the  OSD  Compon¬ 
ent’s  Information  practices,  safeguards, 
and  any  future  plans  for  improving  the 
records  systems. 

(iii)  Exemptions.  A  list  of  records  sys¬ 
tems  which  were  exempt  during  the  year 
from  any  of  the  operative  provisions  of 
this  law  as  permitted  under  the  terms 
of  subsections  (j)  and  (k)  of  the  Privacy 
Act,  and  whether  or  not  the  exemptions 
were  obtained  during  the  year,  the  num¬ 
ber  of  records  in  each  system  exempted 
from  each  specific  provision,  and  rea¬ 
sons  for  invoking  the  exemption. 

(iv)  Number  of  systems.  A  brief  sum¬ 
mary  of  changes  to  the  total  inventory 
of  records  systems  subject  to  the  provi¬ 
sions  of  the  Act,  including  reasons  for 
major  changes;  e.g.,  the  extent  to  which 
review  of  the  relevance  of  and  necessity 
for  records  has  resulted  in  elimination 
of  all  or  portions  of  systems  of  records, 
or  any  reduction  in  the  number  of  indi¬ 
viduals  on  whom  records  are  maintained. 

(iv)  Operational  experiences.  A  gen¬ 
eral  description  of  operational  experi¬ 
ences  to  include: 

(a)  The  number  of  individuals — com¬ 
pared  to  the  number  of  records  in  the 
system — exercising  their  rights  under  the 
Privacy  Act. 

(b)  The  number  of  requests  for  infor¬ 
mation  received; 

(c)  The  number  of  requests  refused ; 

( d )  The  number  of  appeals ; 

(e)  The  number  of  those  seeking  re¬ 
dress  through  the  courts. 

(vi)  Costs.  Any  available  data,  or  es¬ 
timates,  of  the  cost  of  administering 
the  Privacy  Act  program  will  be  re¬ 
ported.  (DoD  Directive  5000.22  )l 

(c)  Access  to  information  on  records 
systems. 

(1)  Upon  request,  and  as  provided  by 
the  Privacy  Act,  records  shall  be  dis¬ 
closed  to  the  individual  to  whom  they 
pertain  and  under  whose  Individual 
name  or  identifier  they  are  filed,  unless 
exempted  by  provisions  stated  in  286b.5 
(16)  and  286b.ll.  There  Is  no  require¬ 
ment  that  a  record  be  created  or  that  an 
individual  be  given  access  to  records 
which  are  not  retrieved  by  name  or  other 
individual  identifier. 

(i)  The  granting  of  access  to  a  record 
containing  personal  information  shall 
not  be  conditioned  upon  any  requirement 
that  the  individual  state  a  reason  or 
otherwise  justify  the  need  to  gain  access. 

(ii)  No  verification  of  identity  shall 
be  required  of  an  individual  seeking  ac¬ 
cess  to  records  which  are  otherwise  avail¬ 
able  to  the  public. 

(iii)  Individuals  may  not  be  denied 
access  to  a  record  in  a  system  of  records 

1  Piled  as  part  of  original.  Copies  avaUable 
from  the  U.S.  Naval  Publications  and  Forms 
Center,  6801  Tabor  Ave  ,  Philadelphia,  Pa. 
19120,  Attn:  Code  300. 


pertaining  to  themselves  because  those 
records  are  exempted  from  disclosure 
under  the  provisions  of  DoD  Directive 
5400.7  (32  CFR  286.6(b))  which  states: 

“  •  •  •  An  exempted  record  or  reason¬ 
able  segregable  portion  of  a  record, 
however,  should  be  made  available  upon 
request  of  any  member  of  the  public 
when,  in  the  judgment  of  the  releasing 
component  or  higher  authority,  no  sig¬ 
nificant,  legitimate  governmental  pur¬ 
pose  would  be  served  by  withholding  it 
under  an  applicable  exemption.” 

(iv)  Individuals  will  not  be  denied 
access  to  their  records  for  refusing  to 
disclose  their  Social  Security  Number, 
unless  disclosure  of  the  SSN  is  required 
by  statute  or  by  regulation  adopted  be¬ 
fore  January  1,  1975,  or  if  the  record’s 
filing  identifier  and  the  only  method  of 
retrieval  is  by  SSN. 

(2)  Any  individual  may  request  access 
to  a  record  pertaining  to  him  in  person 
or  by  mail  in  accordance  with  the  pro¬ 
cedures  outlined  below: 

(3)  The  type  of  information  consid¬ 
ered  necessary  to  identify  a  record  is: 
the  individual’s  name,  date  of  birth,  place 
of  birth,  identification  of  the  records  sys¬ 
tem  as  listed  in  the  Federal  Register;  or 
sufficient  information  to  Identify  the  type 
of  records  being  sought  and  approximate 
date  the  records  might  have  been  created. 

(1)  Any  individual  making  a  request 
In  person  shall  present  himself  at  the 
Office  of  the  Records  Administrator,  Of¬ 
fice  of  the  Secretary  of  Defense,  Room 
5C315,  The  Pentagon,  Washington,  D.C. 
20301  and  shall : 

(A)  Provide  personal  identification  ac¬ 
ceptable  to  the  Records  Administrator  to 
verify  the  individual’s  identity,  e.g.,  driv¬ 
er’s  license,  employees  identification 
card,  or  medicare  card; 

(B)  Complete  and  sign  the  appro¬ 
priate  form  provided  by  the  Records 
Administrator. 

(4)  Any  individual,  when  reviewing  a 
record  in  person,  may  be  accompanied  by 
another  individual  of  his  or  her  choosing. 
The  Records  Administrator  will  require 
a  written  statement  authorizing  the  ac¬ 
companying  individual’s  presence. 

(5)  An  Individual’s  records  may  also 
be  released  to  his  or  her  authorized  rep¬ 
resentative  provided  that  notarized  writ¬ 
ten  consent  of  the  individual  is  furnished. 

(6)  Any  individual  making  a  request 
for  access  by  mail  shall  address  such  re¬ 
quest  to  the  Records  Administrator,  Of¬ 
fice  of  Secretary  of  Defense,  The  Penta¬ 
gon,  Room  5C315,  Washington,  D.C. 
20301,  and  shall  include  therein  a  signed 
notarized  statement  to  verify  his  identity. 

(7)  Any  requests  from  an  individual 
for  access  to  or  copies  of  his  own  records 
shall  be  processed  in  accordance  with 
this  Part  and  not  the  Freedom  of  In¬ 
formation  Act. 

(8)  Normally,  requests  for  access  to 
records  should  be  acknowledged  within 
10  working  days  of  receipt  and  access 
provided  within  30  working  days. 

(9)  The  following  procedures  will  ap¬ 
ply  to  requests  for  access  to  investiga¬ 
tory  records: 

(1)  Copies  of  investigatory  records 
compiled  by  any  Investigative  organiza¬ 
tion,  but  in  the  temporary  custody  of  an 
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element  requesting  the  record  for  pur¬ 
poses  of  adjudication  or  other  personnel 
actions,  are  considered -records  of  the 
originating  investigative  organization. 

(ii)  Individuals  seeking  access  to  such 
records  shall  be  directed  to  the  originat¬ 
ing  investigative  organization  and  should 
be  instructed  to  direct  all  requests  sub¬ 
mitted  under  the  Privacy  Act  of  1974  to 
that  organization. 

(iii)  Records  concerning  adjudication, 
or  other  personnel  actions  based  on  the 
investigative  records  which  are  originated 
by  the  organization  using  the  investiga¬ 
tive  records,  are  considered  records  of 
the  using  organization,  and  that  orga¬ 
nization  shall  respond  to  requests  for  ac¬ 
cess  to  these  records  under  the  Privacy 
Act  of  1974  concerning  them. 

(10)  Access  to  a  record  or  a  copy  there¬ 
of  will  not  be  denied  solely  because  the 
record’s  physical  presence  is  not  readily 
available,  e.g.,  on  magnetic  tape,  or  be¬ 
cause  the  context  of  the  record  may  con¬ 
tain  sensitive  information  about  another 
individual.  To  protect  the  privacy  of 
other  individuals  who  may  be  identified 
in  a  record,  an  extract  shall  be  prepared 
deleting  only  that  information  which 
would  not  be  released  to  the  requesting 
individual  under  DoD  Directive  5400.7 
(32  CPR  Part  286) . 

(11)  Medical  records  shall  be  disclosed 
to  the  individual  to  whom  they  pertain, 
unless  a  determination  is  made,  in  con¬ 
sultation  with  a  medical  doctor,  that  the 
disclosure  of  medical  information  could 
have  adverse  effect  upon  the  individual’s 
physical  or  mental  health.  Such  informa¬ 
tion  may  be  transmitted  to  a  medical 
doctor  named  by  the  individual  con¬ 
cerned. 

(12)  Test  material,  and  copies  of  cer¬ 
tificates,  and  any  lists  of  eligible  individ¬ 
uals,  will  be  removed  from  the  records 
prior  to  exposure  to  the  requester,  and 
shall  not  be  disclosed. 

(13)  Information  contained  in  inves¬ 
tigative  reports  may  be  disclosed  to  the 
individual  to  whom  they  pertain  pro¬ 
vided  the  Information  released  does  not 
divulge  the  source  of  the  information. 
(Refer  to  S  286b.ll.) 

(14)  The  individual  may  not  be  charg¬ 
ed  for  search  or  review  if  they  are  a 
necessary  part  of  the  process  of  making 
the  record  available.  Only  costs  of  re¬ 
production,  as  outlined  in  §286b.5(g)  may 
be  charged;  however,  if  copying  is  the 
only  means  whereby  the  record  can  be 
made  available  to  the  individual,  repro¬ 
duction  fees  will  not  be  assessed  (e.g., 
when  a  copy  must  be  made  in  order  to  ex¬ 
clude  information  on  the  record  pertain¬ 
ing  to  another  individual.) 

(15)  If  the  individual  can  provide  no 
suitable  document  for  identification,  the 
OSD  Records  Administrator  should  re¬ 
quest  a  signed  notarized  statement  as¬ 
serting  his  or  her  identity  which  stipu¬ 
lates  that  the  individual  understands 
that  knowingly  or  willfully  seeking  or  ob¬ 
taining  access  to  records  about  another 
person  under  false  pretenses  is  punish¬ 
able  by  a  fine  up  to  $5,000.  (Refer  to 
§286b.5(f) .) 

(16)  The  requirements  of  this  section 
do  not  entitle  an  individual  the  right  to 
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access  to  any  information  compiled  in 
reasonable  anticipation  of  a  civil  action 
or  proceeding. 

(d)  Request  to  amend  personal  infor¬ 
mation  in  records  systems  and  disputes. 

(1)  OSD  Components  shall  allow  indi¬ 
viduals  to  request  amendment  to  their 
records  to  the  extent  that  such  amend¬ 
ment  does  not  violate  existing  statute, 
regulation,  or  administrative  procedure. 
Requests  should  be  as  brief  and  as  simple 
as  possible  and  should  contain,  as  a  mini¬ 
mum,  identifying  information  to  locate 
the  record,  a  description  of  the  items 
to  be  amended  and  the  reason  for  the 
change.  A  request  shall  not  be  rejected 
or  required  to  be  resubmitted  unless  ad¬ 
ditional  information  is  essential  to  proc¬ 
ess  the  request.  Incomplete  or  inaccurate 
requests  shall  not  be  rejected  categori¬ 
cally;  the  individual  shall  be  asked  to 
clarify  the  request  as  needed.  Individuals 
shall  be  required  to  provide  verification 
of  identity  as  in  (c)  (3)  of  this  section,  to 
ensure  that  the  requester  is  seeking  to 
amend  records  pertaining  to  him  and 
not,  inadvertently  or  intentionally,  the 
records  of  another  individual. 

(2)  Requests  to  amend  the  personnel 
records  of  former  Federal  employees 
which  are  located  at  the  Federal  Per¬ 
sonnel  Records  Center  must  be  submitted 
to:  Director,  Bureau  of  Manpower  In¬ 
formation  Systems,  U.S.  Civil  Service 
Commission,  1900  E  Street,  NW,  Wash¬ 
ington,  D.C.  20415. 

(3)  OSD  Records  Administrator  shall 
mail  a  written  acknowledgement  of  an 
individual’s  request  to  amend  his  or  her 
record  within  10  days  after  receipt,  ex¬ 
cluding  Saturday,  Sundays,  and  legal 
public  holidays.  Such  acknowledgement 
shall  identify  the  request  and  may,  if 
necessary,  request  any  additional  infor¬ 
mation  needed  to  make  a  determina¬ 
tion.  No  acknowledgement  is  necessary 
if  the  request  can  be  reviewed,  processed, 
and  the  individual  notified  of  compli¬ 
ance  or  denial  within  the  10-day  pe¬ 
riod.  Whenever  practicable,  the  decision 
shall  be  made  within  30  working  days. 
For  requests  presented  in  person,  writ¬ 
ten  acknowledgement  may  be  provided 
at  the  time  the  request  is  presented. 

(4)  The  Head  of  an  OSD  Component, 
or  his  designated  official,  shall  take 
promptly  one  of  the  following  actions 
on  requests  to  amend  the  records: 

(i)  If  he  agrees  with  any  portion  or 
all  of  the  individual’s  request,  he  will 
proceed  to  amend  the  records  in  accord¬ 
ance  with  existing  statutes,  regulations, 
or  administrative  procedures,  and  in¬ 
form  the  requester  of  the  action  taken. 
The  Head  of  the  OSD  Component  con¬ 
cerned,  or  his  designated  official,  shall 
also  advise  all  previous  holders  of  the 
record  that  the  amendment  has  been 
made  and  the  substance  of  the  correc¬ 
tion. 

(ii)  If  he  disagrees  with  all  or  any 
portion  of  a  request,  he  shall  promptly 
inform  the  individual  of  his  refusal  to 
amend  a  record  in  accordance  with  the 
individual’s  request,  the  reason  for  the 
refusal,  and  the  procedure  established 
by  OSD  for  an  appeal  as  outlined  in  sub¬ 
section  (7)  of  this  paragraph. 
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(iii)  If  the  request  for  amendment 
pertains  to  a  record  controlled  and 
maintained  by  another  Federal  Agency, 
refer  the  request  to  the  appropriate 
Agency,  and  advise  the  requester  there- 
Agency,  and  advise  the  requester 
thereof. 

(5)  The  following  procedures  will  be 
used  when  reviewing  records  under  dis¬ 
pute: 

(i)  In  response  to  a  request  for  an 
amendment  to  records  officials  shall  de¬ 
termine  the  accuracy,  relevance,  time¬ 
liness,  or  completeness  of  the  record  re¬ 
quested.  The  Head  of  an  OSD  Compon¬ 
ent,  or  his  designated  official,  shall  de¬ 
velop  tolerances  for  accuracy,  relevance 
and  timeliness  by  giving  consideration 
to  whether  such  tolerances  could  result 
in  consequences  adverse  to  the  indi¬ 
vidual. 

(ii)  The  Head  of  an  OSD  Component 
or  his  designated  official,  will  limit  the 
review  of  a  record  to  those  items  of  in¬ 
formation  which  clearly  bear  on  any 
determination  to  amend  the  records  and 
assure  that  all  those  elements  are  pres¬ 
ent  before  such  determination  is  made. 

(6)  If  the  Head  of  an  OSD  Component, 
or  his  designated  official,  after  an  initial 
review  of  a  request  to  amend  a  record 
disagrees  with  all  or  any  portion  of  it, 
he  will: 

(i)  Advise  the  individual  of  the  denial 
and  the  reason  therefor. 

(ii)  Inform  the  individual  that  he  or 
she  may  request  a  further  review. 

(iii)  Describe  the  procedures  for  re¬ 
questing  such  review  including  the  name 
and  address  of  the  official  to  whom  the 
request  should  be  directed.  The  proce¬ 
dures  should  be  as  brief  and  simple  as 
possible  and  should  indicate  where  the 
individual  can  seek  advice  or  assistance 
in  obtaining  such  review. 

(iv)  Furnish  a  copy  of  the  Justification 
of  any  denial  to  amend  a  record  to  the 
DASD(A) .  (Reference  286b.4(c)  (12)  and 
(13).) 

(7)  If  an  individual  disagrees  with  the 
initial  OSD  determination,  he  or  she  may 
file  a  request  for  further  review  of  that 
determination. 

(i)  He  should  send  the  request  to: 
Deputy  Assistant  Secretary  of  Defense 
(Administration),  Department  of  De¬ 
fense,  The  Pentagon,  Washington,  D.C. 
20301,  if  the  record  is  created  and  main¬ 
tained  by  an  OSD  Component. 

(ii)  If  the  record  is  contained  in  one 
of  the  personnel  records  systems  which 
have  been  retired  and  forwarded  to  the 
Personnel  Records  Center,  St.  Louis,  Mis¬ 
souri,  the  request  for  review  should  be 
sent  to  the  Director,  Bureau  of  Man¬ 
power  Information  Systems,  U.S.  Civil 
Service  Commission,  Washington,  D.C. 
20415. 

(8)  If,  after  review,  the  DASD(A) 
further  refuses  to  amend  the  records  as 
requested,  the  DASD(A)  should  advise 
the  individual: 

(i)  Of  the  refusal  and  the  reason 

therefor;  j 

(ii)  Of  his  or  her  right  to  file  a  con¬ 
cise  statement  of  the  reason  for  the  dis¬ 
agreement  with  the  DASD(A)  ’s  decision; ) 
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(iii)  Of  the  procedures  for  filing  a 
statement  of  disagreement; 

( iv)  That  the  statement  which  is  filed 
will  be  made  available  to  anyone  to  whom 
the  record  is  subsequently  disclosed,  to¬ 
gether  with  a  brief  statement,  at  the  dis¬ 
cretion  of  the  OSD  Component,  sum¬ 
marizing  its  reasons  for  refusing  to 
amend  the  records. 

tv)  That  prior  recipients  of  copies  of 
disputed  records  will  be  provided  a  copy 
of  any  statement  of  dispute  to  the  extent 
that  an  accounting  of  disclosure  is  main¬ 
tained. 

tvi)  Of  his  or  her  right  to  seek  ju¬ 
dicial  review  of  the  DASD(A)’s  refusal 
to  amend  a  record. 

<9)  If  after  the  review  the  DASD(A) 
determines  that  the  record  should  be 
amended  in  accordance  with  the  individ¬ 
ual’s  request,  the  OSD  Component  shall 
amend  the  record,  advise  the  individual, 
and  inform  previous  recipients  where  an 
accounting  of  disclosure  has  been  main¬ 
tained. 

(10)  A  final  OSD  determination  on  the 
individual’s  request  for  a  review  of  the 
DASD(A)  ’s  refusal  to  amend  the  record 
must  be  concluded  within  30  days  (ex¬ 
cluding  Saturdays,  Sundays  and  legal 
holidays)  after  receipt  by  the  proper 
office.  If  the  DASD(A)  determines  that  a 
fair  and  equitable  review  cannot  be  made 
within  that  time,  the  individual  will  be 
informed  in  writing  of  reasons  for  the 
delay  and  of  the  approximate  date  on 
which  the  review  is  expected  to  be  com¬ 
pleted. 

(e)  Disclosure  of  disputed  information. 
(1)  After  the  DASD(A)  has  refused  to 
amend  a  record  and  the  individual  has 
filed  a  statement  under  paragraph  (d) 
of  this  section,  the  OSD  Component 
shall  clearly  annotate  the  record  so  that 
the  proceeding  is  apparent  to  any  au¬ 
thorized  person  to  whom  the  record  is 
disclosed.  The  notation  itself  shall  be 
integral  to  the  record.  Where  an  account¬ 
ing  of  disclosure  has  been  made,  the 
Component  shall  advise  previous  recip¬ 
ients  that  the  record  has  been  disputed 
and  shall  provide  a  copy  of  the  individ¬ 
ual’s  statement. 

(i)  This  statement,  however,  need  not 
be  filed  as  an  integral  part  of  the  record 
to  which  it  pertains.  It  shall  instead  be 
maintained  in  a  manner  so  as  to  permit 
ready  retrieval  whenever  the  disputed 
portion  of  the  record  is  to  be  disclosed. 

(ii)  When  information  which  is  the 
subject  of  a  statement  of  dispute  is  sub¬ 
sequently  disclosed,  the  OSD  Component 
shall  note  which  information  is  disputed 
and  provide  a  copy  of  the  individual's 
statement. 

;  (2)  The  OSD  Component  shall  in¬ 

clude  a  brief  summary  of  its  reasons  for 
not  making  a  correction  when  disclosing 
disputed  Information.  Such  statement 
will  normally  be  limited  to  the  reasons 
given  to  the  individual  for  not  amending 
the  record. 

(3)  Copies  of  the  OSD  Component’s 
summary  will  be  treated  as  part  of  the 
Individual's  record;  however,  it  will  not 
be  subject  to  the  amendment  procedure. 

(f)  Penalties — (1)  CivU  action,  (i)  An 
individual  may  file  civil  suit  against  the 


United  States,  for  (A)  refusal  to  amend 
the  records;  (B)  improper  denial  of  the 
individual’s  access  to  a  record;  and/or 
(C)  for  failure  to  maintain  a  record 
accurately. 

(ii)  An  individual  may  also  file  suit 
against  the  United  States,  for  failure  to 
implement  a  provision  of  the  Privacy 
Act  when  such  failure  leads  to  an  ad¬ 
verse  determination  against  him  or  her. 

(iii)  If  the  individual's  suit  is  upheld, 
the  court  may  direct  the  United  States 
to  take  necessary  corrective  action;  to 
pay  the  court  costs,  and  lawyer's  fees. 

(iv)  Where  the  individual  can  show 
that  personal  damage  was  done  because 
an  OSD  officer  or  employee  failed  to  com¬ 
ply  with  the  provisions  of  the  Privacy 
Act,  the  United  States  may  be  assessed 
damages  by  the  court  at  a  minimum  of 
$1,000. 

(2)  Criminal  action,  (i)  Criminal  pen¬ 
alties  may  be  imposed  against  an  OSD 
officer  or  employee  for  willful  unauthor¬ 
ized  disclosure  of  information  in  the 
records;  or  for  failure  to  publish  a  notice 
of  the  existence  of  a  records  system  in 
the  Federal  Register;  or  for  gaining 
access  to  the  individual’s  record  under 
false  pretenses,  i.e.,  against  any  person 
who  knowingly  and  willfully  requests  or 
obtains  any  record  concerning  another 
individual  without  legal  authorization. 

(ii)  For  a  violation  of  the  above,  an 
OSD  officer  or  employee  may  be  fined  up 
to  $5,000. 

(g)  Fees.  (1)  An  individual  will  be 
charged  fees  for  requested  copies  of  his 
or  her  records,  excluding  the  cost  of  any 
search  for  and  review  of  records,  at  the 
following  rates: 

(1)  Certification  and  validation  of 
copies  with  the  Department  of  Defense 
seal,  each  page — $3.00 

(ii)  Office  copy  reproductions,  each 
page — .05 

(2)  If  the  requestor  requires  the  OSD 
Component  to  perform  additional  serv¬ 
ices  not  specifically  covered  under  the 
Privacy  Act,  the  charging  of  fees  will 
be  determined  by  the  rates  contained  in 
DoD  Directive  5400.11  (32  CFR  Part  286) . 

(h)  Written  consent  for  authorized  dis¬ 
closures.  (1)  An  OSD  Component  may 
disclose  personal  information  from  rec¬ 
ords  systems  to  persons  or  Agencies  only 
if  it  has  or  acquires  express  written  con¬ 
sent  of  the  individual  to  whom  the  record 
pertains. 

(2)  Written  consent  is  not  required  if 
the  disclosure  is: 

(i)  To  those  officials  and  employees  of 
OSD  who  have  a  need  for  the  record  in 
the  performance  of  their  duties  and  the 
use  is  compatible  with  the  purpose  for 
which  the  record  Is  maintained.  This 
includes  transfer  of  information  between 
components  when  civilians  or  military 
personnel  assigned  or  affiliated  with  one 
component  are  processed  by  an  activity 
of  another  Component. 

(ii)  Required  to  be  disclosed  to  a 
member  of  the  public  by  the  Freedom  of 
Information  Act.  Some  examples  of  per¬ 
sonal  information  pertaining  to  military 
personnel,  which  normally  are  released 
without  an  unwarranted  Invasion  of 
privacy  are:  name,  rank,  date  of  rank, 


salary,  present  and  past  duty  assign¬ 
ments,  future  assignments  which  have 
been  finalized,  office  phone  number, 
source  of  commission,  military  and  civi¬ 
lian  educational  level,  and  promotion 
sequence  number.  Disclosure  of  personal 
information  pertaining  to  civilian  em¬ 
ployees  shall  be  made  in  accordance  with 
the  Federal  Personnel  Manual. 

(iii)  For  a  routine  use  as  defined  in 
§  286b.7  (The  routine  uses  shall  be  pub¬ 
lished  in  the  Federal  Register  prior  to 
being  used  by  an  OSD  Component.) 

(iv)  To  the  Bureau  of  the  Census  for 
purpose  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity  au¬ 
thorized  by  law. 

(v)  To  a  recipient  who  has  provided 
the  OSD  Component  with  advance  ade¬ 
quate  written  assurance  that  (A)  the  rec¬ 
ord  will  be  used  solely  as  a  statistical  re¬ 
search  or  reporting  record;  (B)  the  rec¬ 
ord’  is  to  be  transferred  in  a  form  that 
is  not  individually  identifiable  (i.e.,  the 
identity  of  the  Individual  cannot  be 
determined  by  combining  various  statis¬ 
tical  records) ;  and  (C)  will  not  be  used 
to  make  any  decisions  about  the  rights, 
benefits  or  entitlements  of  an  individual. 

(vi)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has  suf¬ 
ficient  historical  or  other  value  to  war¬ 
rant  its  continued  preservation  by  the 
United  States  Government. 

(vii)  To  another  agency  or  to  an  in¬ 
strumentality  of  any  governmental  juris¬ 
diction  within  or  under  the  control  of 
the  United  States  for  a  civil  or  criminal 
law  enforcement  activity  if  the  activity 
is  authorized  by  law,  and  if  the  head  of 
the  agency  or  instrumentality  has  made 
a  written  request  to  the  OSD  Component 
which  maintains  the  record  specifying 
the  particular  portion  desired  and  the 
law  enforcement  activity  for  which  the 
record  is  sought.  Blanket  requests  for  all 
records  pertaining  to  an  individual  will 
not  be  accepted.  A  record  may  also  be 
disclosed  to  a  law  enforcement  agency 
at  the  initiative  of  the  OSD  Component 
which  maintains  the  record  when  crimi¬ 
nal  conduct  is  suspected,  provided  that 
such  disclosure  has  been  established  in 
advance  as  a  “routine  use.” 

(viii)  To  a  person  showing  compelling 
circumstances  affecting  the  health  or 
safety  of  an  individual  if,  upon  such  dis¬ 
closure,  notification  is  transmitted  to  the 
last  known  address  of  the  individual  to 
whom  the  record  pertains. 

(ix)  To  either  the  Senate  or  the  House 
of  Representatives  if  the  subject  matter 
comes  within  its  Jurisdiction,  any  com¬ 
mittee  or  subcommittee  thereof,  or  any 
joint  committee.  This  does  not  authorize 
the  disclosure  of  any  record  referred  to 
in  this  Part  to  members  of  Congress 
acting  in  their  individual  capacities  or 
on  behalf  of  their  constituents,  unless 
the  individual  concerned  gives  his  con¬ 
sent  in  writing. 

(x)  To  the  Comptroller  General,  or 
any  of  his  authorized  representatives, 
in  the  course  of  the  performance  of  the 
duties  of  the  General  Accounting  Office. 

(xi)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction. 

(A)  When  a  record  is  disclosed  under 
compulsory  legal  process  and  when  the 
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Issuance  of  that  order  or  subpoena  Is 
made  public  by  the  court  which  issued 
it,  the  OSD  Component  will  make  reason¬ 
able  efforts  to  notify  the  individual  to 
whom  the  record  pertains.  This  may  be 
accomplished  by  notifying  the  individual 
by  mail  at  his  most  recent  address  as 
contained  in  the  OSD  Component’s 
record. 

(B)  Upon  being  served  with  a  court 
order  to  disclose  a  record,  the  OSD  Com¬ 
ponent  should  determine  whether  the 
issuance  of  the  order  is  a  matter  of  public 
record  and,  if  it  is  not,  ask  to  be  advised 
by  the  court  when  it  becomes  public.  An 
accounting  of  the  disclosure  shall  be 
made  at  the  time  the  OSD  Component 
complies  with  the  order  or  subpoena. 

(i)  Accounting  for  the  disclosures  of 
records.  All  disclosures  of  records  cov¬ 
ered  by  this  subsection  shall  be  accounted 
for  by  keeping  a  written  record  of  the 
following  information: 

(1)  The  date,  nature,  and  purpose  of 
each  disclosure  of  a  record  to  any  per¬ 
son  or  to  another  Agency  unless  made 
in  accordance  with  (h)  (2)  of  this  sec¬ 
tion.  In  addition,  the  name  and  address 
of  the  person  to  whom  the  disclosure  is 
made  shall  be  recorded.  Moreover,  this 
disclosure  record  must  be  retained  for 
the  life  of  the  personal  record  to  which 
it  pertains,  or  for  five  years,  whichever 
is  longer. 

(2)  The  accounting  of  the  disclosure 
may  be  recorded  in  any  manner  an  office 
determines  sufficient  for  this  purpose. 
However,  the  official  responsible  must  be 
able  to  reconstruct  from  its  system  the 
required  accounting  information  (i) 
when  required  by  the  individual;  (ii) 
when  necessary  to  inform  previous  re¬ 
cipients  of  any  amended  records.  The  ac¬ 
counting  should  provide  a  cross-refer¬ 
ence  for  the  justification  or  basis  upon 
which  the  disclosure  was  made,  including 
any  written  documentation  required 
when  records  are  released  for  statistical 
or  law  enforcement  purposes. 

(3)  The  system  of  accounting  of  dis¬ 
closure  is  not  considered  a  system  of  rec¬ 
ords  under  definitions  listed  on  §  286b.7. 
No  record  of  accounting  for  disclosure 
need  be  maintained. 

(4)  Upon  request  of  the  individual  to 
whom  the  record  pertains,  make  avail¬ 
able  to  that  individual  all  information  in 
its  accounting  of  disclosures  except  that 
pertaining  to  disclosures  for  law  enforce¬ 
ment  purposes  pursuant  to  9  286b.  11 
(b)(2). 

(j)  Names  and  addresses.  (1)  An  indi¬ 
vidual’s  name  and  address  may  not  be 
sold  or  rented  by  an  OSD  Component 
unless  such  action  is  specifically  author¬ 
ized  by  law.  This  provision  shall  not  be 
construed  to  require  the  withholding  of 
names  and  addresses  otherwise  permit¬ 
ted  to  be  made  public. 

(2)  Lists  or  compilations  of  names  and 
home  addresses,  or  single  home  addresses 
will  not  be  disclosed  to  the  public,  with¬ 
out  the  consent  of  the  individual  in¬ 
volved.  This  includes,  but  is  not  limited 
to,  individual  congressmen,  creditors, 
and  commercial  and  financial  institu¬ 
tions.  Requests  for  home  addresses  may 
be  forwarded  by  OSD  Components  to  the 
last  known  address  of  the  Individual  for 


PROPOSED  RULES 

reply  at  his  discretion,  and  the  requester 
notified  accordingly.  This  prohibition 
may  be  waived  when  circumstances  of  a 
case  indicate  compelling  and  overriding 
interests. 

(k)  Collection  of  personal  information 
from  individuals.  Personal  information 
shall  be  collected,  to  the  greatest  extent 
practicable,  directly  from  the  individual 
when  the  information  may  result  in  ad¬ 
verse  determinations  about  an  individ¬ 
ual’s  rights,  benefits,  or  privileges  under 
Federal  programs.  The  collection  of  in¬ 
formation  from  third  parties  shall  be 
minimized.  Exceptions  to  this  policy  may 
be  made  under  certain  circumstances, 
such  as  the  following: 

(l)  The  nature  of  the  information  is 
such  that  there  is  need  to:  (i)  Obtain  it 
from  a  third  party,  e.g.,  an  employee’s 
performance  during  a  previous  assign¬ 
ment;  or  (ii)  verify  it  by  a  third  party, 
e.g.,  information  for  a  security  clearance. 

(2)  Collecting  the  information  from 
the  individual  would  be  exceptionally 
difficult  or  result  in  unreasonable  cost. 

(3 )  Provisions  are  made  to  ensure  that 
there  is  no  risk  in  collecting  the  infor¬ 
mation  from  third  parties  which,  if  in¬ 
accurate,  could  result  in  an  adverse  de¬ 
termination  to  the  individual  concerned. 

(Z)  Forms  administration  and  inform¬ 
ing  individuals  on  uses  of  information. 
Each  OSD  Component  that  collects  in¬ 
formation  from  an  individual  shall: 

(1)  Ensure  that  individuals  from 
whom  information  is  collected  about 
themselves  are  informed  of  U)  the  au¬ 
thority  which  authorizes  its  solicitation, 
e.g.,  statute.  Executive  Order;  (ii)  the 
principal  purposes  for  which  it  is  to  be 
used;  (iii)  the  routine  use  to  be  made  of 
it;  (iv)  whether  furnishing  such  infor¬ 
mation  is  mandatory  or  voluntary  and 
the  effect  on  the  individual  of  not  pro¬ 
viding  information. 

(A)  This  includes  requests  for  Social 
Security  Numbers.  Executive  Order  No. 
9397,  November  22,  1943,  authorizes 
Components  to  use  SSN’s  as  a  system  of 
numerical  indentiflcation  of  individuals. 
If,  however,  disclosure  of  the  SSN  is  not 
required  by  E.  O.  or  Federal  statute,  or 
is  not  for  a  system  of  records  in  existence 
and  operating  prior  to  January  1,  1975, 
OSD  Components  are  not  precluded 
from  requesting  it  from  individuals  con¬ 
cerned. 

(B)  The  separate  Privacy  Act  State¬ 
ment  for  the  SSN  alone,  or  merged  Pri¬ 
vacy  Act  Statement,  covering  not  only 
the  SSN,  but  also  other  items  of  personal 
information,  must  make  clear  that  the 
disclosure  of  the  SSN  is  voluntary.  If, 
in  such  instances,  the  individual  refuses 
to  disclose  it,  the  Component  concerned 
must  be  prepared  to  identify  him  by 
alternate  means. 

(2)  These  four  points,  (Sec  (1)  of  this 
paragraph)  may  be  made  on  the  form,  or 
on  a  separate  statement  that  can  be  re¬ 
tained  by  the  individual.  The  word 
“form”  should  be  interpreted  to  include 
any  preprinted  document  with  a  control 
number  and  edition  date,  a  format,  ques¬ 
tionnaire,  survey  sheet,  or  any  report 
requiring  personal  information  which 
prescribes  no  standard  format  or  pre- 
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printed  answer  blanks,  or  a  report  ren¬ 
dered  on  a  blank  sheet. 

(3)  Forms  in  use  prior  to  September 
27,  1975.  Since  it  seems  impracticable 
to  revise  each  existing  form  to  meet  the 
requirement  of  the  four  points  men¬ 
tioned  in  (1)  of  this  paragraph,  it  will 
be  necessary  to  devise  a  separate  form 
as  an  alternative  during  the  interim  im¬ 
plementation  period.  A  suggested  stand¬ 
ardized  format  is  at  §  286b.  10. 

(4)  OSD  Components’  forms  manage¬ 
ment  officers  in  each  office  will  tenta¬ 
tively  identify  from  their  lists  of  au¬ 
thorized  forms  and  reports  those  which 
might  fall  within  the  provisions  of  the 
Act.  Such  tentatively  identified  forms 
and  reports  will  then  be  forwarded  to 
the  initiators  (or  proponents)  of  the 
form  for  final  determination  as  to  which 
meet  the  criteria  of  this  provision  of  the 
Act.  (Refer  to  3(e)  (3)  and  section  7(b) 
of  the  Privacy  Act  of  1974.) 

(i)  Upon  final  determination  as  to 
which  form  or  report  falls  under  the 
four  point  provision,  the  proponent  will, 
(A)  refer  it  to  the  appropriate  General 
Counsel  for  validation  of  Item  1  “Au¬ 
thority”  and  confirmation  that  statutory 
authority  is  properly  stated;  (B)  furnish 
the  forms  officer  the  individualized 
statement  applicable,  using  the  format 
§286b.l0. 

(5)  OSD  Component’s  forms  manage¬ 
ment  officers  will  assign  to  each  state¬ 
ment  the  same  number  as  the  form  or 
report  to  which  it  applies,  together  with 
the  suffix  “ — Privacy  Act  Statement.” 
For  example,  for  DD  Form  398,  “State¬ 
ment  of  Personal  History,”  the  required 
statement  would  carry  in  the  lower  left 
hand  comer  the  number  “DD  Form 
398 — Privacy  Act  Statement.”  For  appli¬ 
cable  reports  in  which  no  form  is  in¬ 
volved,  the  report  control  symbol  or 
OMB  Approval  Number  should  be  used 
in  lieu  of  a  form  number. 

(6)  OSD  Components’  forms  officers 
will  ensure  that  sufficient  copies  of  Pri¬ 
vacy  Act  Statements  as  shown  at  286b. 10 
are  printed  and  distributed  so  that  each 
individual  furnishing  personal  informa¬ 
tion  will  receive  a  copy  of  the  statement 
with  the  form  or  report  he  completes. 

(7)  Forms  Initiated  or  Revised  on  and 
after  September  27,  1975.  As  forms  are 
revised,  or  new  ones  issued,  the  Privacy 
Act  Statement  shall  be  incorporated,  if 
practical.  In  the  body  of  each  form,  for¬ 
mat,  questionnaire,  survey  sheet  or  re¬ 
port  initiated  or  revised  which  is  used 
to  collect  personal  information  on  or 
after  September  27, 1975.  Where  feasible, 
the  Privacy  Act  Statement  when  incor¬ 
porated  on  a  form,  format,  etc.,  should 
be  positioned  in  such  a  manner  as  to  in¬ 
form  the  individual  of  the  4-point  pro¬ 
visions  required  by  the  Act  before  he  be¬ 
gins  to  furnish  any  of  the  information 
requested  in  the  form. 

(8)  OSD  Components  will  ensure  that: 

(i)  Once  determination  is  made  which 

forms  and  reports  require  a  Privacy  Act 
Statement,  a  listing  of  such  forms  and 
reports  is  made  to  include  (A)  form  or 
report  number;  (B)  edition  date;  and 
(C)  complete  title.  This  list  will  be  kept 
current. 
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(ii)  A  consolidated  list  shall  be  main¬ 
tained  by  each  OSD  Component  to  In¬ 
clude  all  forms  and  reports  of  Its 
subordinate  offices,  and  updated  at  least 
monthly. 

(iii)  A  copy  of  this  consolidated  list  of 
forms  and  reports  and  its  updates  Is 
furnished  to  the  OSD  Records  Manage¬ 
ment  Branch,  DASD(A) ,  within  5  days 
after  the  end  of  each  month.  Negative 
reports  will  be  submitted. 

(iv)  A  one-time  report  is  made,  to 
reach  the  OSD  Records  Management 
Branch,  DASDCA)  by  October  10,  1975, 
for  consolidation  and  submission  to  the 
Director  of  Information  Operations  and 
Control,  OASD(C) ,  by  October  20,  1975, 
giving  the  following  summary  informa¬ 
tion: 

(Organizational  Name  of  OSD 
Component) 

Number  of  forms  for  which  a  Privacy 
Act  Statement  was  Issued 

Number  of  reports  for  which  a  Privacy 
Act  Statement  was  issued 


§  286b.6  Reports  required  and  submis¬ 
sion  dates. 


Report 

Reference 

Date  due  (forward 
to  the  OSD  Records 
Administrator) 

Annual  notices  in 
the  Federal 
Register. 

Sec.  286b.6 
(a)  0) 
and  (2). 

Apr.  30  (annually). 

New  or  revised 

Bee.  286b. 5 

90  d  prior  to 

records  systems. 

Changes  to  exist¬ 
ing  records 
systems  not 
requiring  ad¬ 
vance  public 
notice. 

(a)(3). 

implementation. 
Apr.  30  (annually). 

Annual  report . 

.  Sec.  2S6b.5 
(b). 

Mar.  31  (annually).- 

Listing  of  forms..., 

.  Bee.  286b.5 
(1)  (8) (a). 

Monthly  (within  5  d 
after  the  end  of 
each  month); 

1-time  report  of 
forms. 

Sec.  286b. 5 
(e)(8)  <lv).- 

Oct.  10, 1975. 

§  286b.  7  Definitions. 

(a)  Individual.  A  person  who  is  a  citi¬ 
zen  of  the  United  States  or  an  alien  law¬ 
fully  admitted  for  permanent  residence. 

(b)  Maintain.  The  collection,  use, 
maintenance,  or  dissemination  of  rec¬ 
ords. 

(c)  Record.  Any  item,  collection,  or 
grouping  of  Information  about  an  in¬ 
dividual  that  is  maintained  by  an  OSD 
Component,  Including,  but  not  limited  to 
his  education,  financial  transactions, 
medical  history,  and  employment  or 
criminal  history,  and  that  contains  his 
name,  or  an  identifying  number,  symbol, 
or  other  identifying  particular  assigned 
to  the  individual,  such  as  finger  or  voice 
print  or  a  photograph. 

(d)  System  of  records.  A  group  of 
records  under  the  control  of  any  OSD 
Component  from  which  information  is 
retrieved  by  the  name  of  an  individual 
or  by  some  identifying  number,  symbol 
or  other  identifying  particular  assigned 
to  an  individual. 

(e)  Routine  use.  The  disclosure  of  a 
record,  or  the  use  of  such  record  for 
corollary  purposes  compatible  with  the 
purpose  for  which  the  Information  was 
collected  and  that  are  appropriate  and 
necessary  for  the  efficient  conduct  of 
Government.  “Routine  Use”  encompasses 


not  only  common  or  ordinary  uses,  but 
also  all  the  proper  and  necessary  uses  of 
the  record,  even  if  such  use  occurs  infre¬ 
quently. 

(f )  Disclosure.  Either  the  transfer  of  a 
record  or  the  granting  of  access  to  a 
record  to  any  person,  or  to  another 
Agency. 

(h)  Statistical  record.  A  record  in  a 
system  of  records  maintained  for  statis¬ 
tical  research  or  reporting  purposes  only 
and  not  used  in  whole  or  in  part  in  mak¬ 
ing  any  determination  about  an  iden¬ 
tifiable  individual. 

§  286b. 8  Systems  of  records. 

(a)  Contents.  (1)  Each  OSD  Com¬ 
ponent  shall  maintain  in  its  records  sys¬ 
tems  only  such  personal  information  as 
is  relevant  and  necessary  to  accomplish 
a  purpose  or  mission  required  by  statute 
or  Executive  Order  of  the  President. 

(2)  Components  shall  identify  the 
specific  provision  of  law,  or  Executive 
Order,  which  provides  authority  for  the 
maintenance  of  information  in  each  sys¬ 
tem  of  records. 

(3)  Statutory  or  regulatory  authority 
to  establish  and  maintain  a  system  of 
records  does  not  convey  unlimited  au¬ 
thority  to  collect  and  maintain  all  in¬ 
formation  which  may  be  useful  or  con¬ 
venient  to  have.  The  proponent  of  each 
system  of  records  will  evaluate  each 
category  of  information  in  a  system  for 
both  necessity  and  relevance.  In  per¬ 
forming  this  evaluation  the  following 
points  will  be  considered : 

(i)  Relationship  of  each  item  of  infor¬ 
mation  to  the  statutory  or  regulatory 
purpose  for  which  the  system  is  main¬ 
tained. 

(ii)  Specific  adverse  consequences  of 
not  collecting  each  category  of  informa¬ 
tion. 

(iii)  Possibility  of  meeting  the  infor¬ 
mation  requirement  through  use  of 
information  not  individually  identifiable 
or  through  sampling  techniques. 

(iv)  Length  of  time  that  the  informa¬ 
tion  is  needed,  and,  where  appropriate, 
techniques  for  purging  parts  of  the 
record. 

(v)  Financial  cost  of  Information 
maintenance  compared  to  risk  or  adverse 
consequences  of  not  maintaining  it. 

(vi)  Necessity  and  relevance  of  this 
information  to  all  individuals  included 
in  the  system. 

(4)  Collection  will  be  discontinued 
for  each  category  or  item  of  informa¬ 
tion  which  after  the  above  evaluation 
does  not  appear  to  be  reasonably  justifi¬ 
able.  Moreover,  such  information  will 
be  withdrawn  and  destroyed  provided  it 
can  be  economically  segregated  from 
necessary  and  relevant  information. 

(5)  The  evaluation  prescribed  above 
will  be  performed  by  each  proponent  of 
a  system  of  records: 

(i)  During  the  design  phase  of  a  new 
system  of  records  or  a  change  in  an  ex¬ 
isting  system  of  records. 

(ii)  Annually,  prior  to  the  republica¬ 
tion  of  all  system  notices  in  the  Federal 
Register. 

(b)  Publication  of  record  system  no¬ 
tices — (1)  General.  The  Privacy  Act  of 
1974  requires  that  a  notice  of  the  exist¬ 


ence  of  each  system  of  records,  as  de¬ 
fined  in  §  286b. 7  be  published  in  the 
Federal  Register  (reference  S  286b.5 
(a)  (1)  and  (2)). 

(2)  New  record  system  notices.  OSD 
Components  proposing  new  systems  shall  - 
prepare  system  notices  in  the  format 
shown  in  §  286b.9  at  least  90  days  before 
the  proposed  system  change  may  be  le¬ 
gally  implemented  as  outlined  in  §  286b.5 
(a)(3). 

(3)  Changes  to  existing  systems  re¬ 
quiring  advanced  public  notice,  (i)  The 
following  proposed  changes  to  an  existing 
system  must  be  published  in  the  Federal 
Register  for  public  comment  (refer  to 
§  286b. 5(a)  (3) ) . 

(A)  Those  which  expand  the  catego¬ 
ries  of  individuals  on  whom  records  are 
maintained. 

(B)  Those  which  add  new  categories 
of  records  to  the  system. 

(C)  Those  which  add  new  categories 
of  sources. 

(D)  New  or  changed  routine  uses 
which  involve  disclosure  to  a  new  cate¬ 
gory  of  recipient. 

(E)  Changes  in  procedures  governing 
access. 

(ii)  Notices  of  proposed  changes  to  ex¬ 
isting  systems  will  be  submitted  to  the 
DASDCA)  at  least  90  days  prior  to  the 
intended  use  of  the  system  (reference 
S  286b. 5(a)  (3)). 

(4)  Changes  to  existing  systems  not 
requiring  advance  public  notice.  Changes 
in  records  systems  not  stated  in  (b)  (3) 
of  this  section  do  not  require  advance 
publication,  but  must  be  submitted  for 
inclusion  in  the  annual  consolidated  list¬ 
ing  of  records  systems.  Accordingly,  each 
OSD  Component  shall  establish  proce¬ 
dures  to  ensure  that  all  such  changes  are 
forwarded  to  the  DASD(A)  by  April  30 
of  each  year  for  annual  publication  in 
the  Federal  Register. 

(5)  Reports  concerning  new  and 
changed  systems.  Concurrently  with  (b) 
(2)  and  (3),  of  this  section,  DASD(A) 
shall  provide  the  Defense  Privacy  Board 
advanced  notice  of  proposals  to  establish 
new  systems  or  to  change  routine  uses 
of  existing  systems. 

(6)  OSD  Component  issuances.  Each 
OSD  Component  shall  ensure  that  in¬ 
formation  contained  in  each  record  sys¬ 
tem  notice,  as  published  in  the  Federal 
Register,  is  incorporated  or  otherwise 
published  in  its  own  instructions  to  en¬ 
sure  uniform  system  use  and  mainte¬ 
nance.  OSD  Components  shall  take  im¬ 
mediate  action  either  to  publish  a  notice 
of  its  records  system,  or  discontinue  any 
system  of  records  not  published  in  the 
Federal  Register.  All  record  system 
notices  will  be  submitted  to  the  DASD(A) 
for  forwarding  to  the  Federal  Register. 

(c)  Standards  of  accuracy.  (1)  Rec¬ 
ords  used  by  an  OSD  Component  in  mak¬ 
ing  determinations  about  an  individual 
will  be  maintained  with  such  accuracy, 
relevance,  timeliness  and  completeness 
as  is  reasonably  necessary  to  ensure  fair¬ 
ness  to  the  individual  in  any  determina¬ 
tion. 

(2)  Prior  to  disseminating  any  record 
about  an  individual  to  any  person  other 
than  a  Federal  agency,  reasonable  efforts 
will  be  made  to  ensure  that  such  records 
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are  accurate,  complete,  timely,  and  rele¬ 
vant  for  agency  purposes. 

(d)  Restriction  on  maintenance  of 
certain  records.  No  records  will  be  kept 
which  describe  how  individuals  exercise 
rights  guaranteed  by  the  First  Amend¬ 
ment,  unless  specifically  authorized  by 
statute,  or  by  the  individual  concerned, 
or  unless  pertinent  to  and  within  the 
scope  of  an  authorized  law  enforcement 
activity.  The  exercise  of  these  rights  in¬ 
cludes,  but  is  not  limited  to,  religious  and 
political  beliefs,  freedom  of  speech  and 
the  press,  and  freedom  of  assembly  and 
freedom  to  petition. 

(e)  Safeguarding  personal  informa¬ 
tion  in  Manual  and  Automated  Records 
Systems.  (1)  Each  OSD  Component  shall 
establish  administrative  procedures  and 
physical  controls  to  protect  information 
in  records  systems  against  any  threats 
or  hazards  to  their  security  or  integrity 
which  could  result  in  substantial  harm, 
embarrassment,  inconvenience,  or  un¬ 
fairness  to  any  individual  on  whom  in¬ 
formation  is  maintained.  These  safe¬ 
guards  shall  apply  to  systems  of  records 
in  whatever  medium  in  which  personal 
information  is  processed  or  stored.  Such 
safeguards  shall  be  tailored  to  the  re¬ 
quirement  of  each  system  of  records. 

(2)  Access  to  personal  information 
shall  be  restricted  to  those  persons  whose 
official  duties  require  access  and  the  in¬ 
dividual  concerned  and  in  accordance 
with  S  286b.5(c) . 

(3)  Each  OSD  Component  maintain¬ 
ing  or  storing  records  shall  designate  an 
individual  who  shall  be  responsible  for 
providing  protection  and  accountability 
for  the  records  Involved  at  all  times,  and 
for  ensuring  that  such  records  are  se¬ 
cured  in  appropriate  containers  when  not 
in  use  or  under  direct  control  of  au¬ 
thorized  persons. 

(4)  Records  may  be  used,  held,  or 
stored  only  where  facilities  or  conditions 
are  adequate  to  prevent  unauthorized 
access. 

(5)  Personal  records  and  documents 
shall  be  stored  so  as  to  preclude  unau¬ 
thorized  disclosure. 

(6)  Proper  control  of  records  systems 
will  be  maintained  at  all  times,  includ¬ 
ing  an  accounting  of  their  removal  from 
the  authorized  area. 

(7)  OSD  Components  shall  assure  that 
all  persons  whose  official  duties  require 
access  to  and  use  of  records  systems  are 
adequately  trained  to  protect  the  secu¬ 
rity  and  privacy  of  the  records. 

(8)  The  disposal  and  destruction  of 
records  system  shall  be  in  accordance 
with  the  General  Schedule  No.  I  issued 
by  the  General  Services  Administration. 
(Copies  available  from  the  OSD  Records 
Administrator.) 

§  286b.9  Instructions  for  Preparation  of 
Record  System  notices. 

(a)  General  instructions.  (1)  For  each 
system  of  records  submit  Information  in 
the  sequence  as  shown  in  paragraph 
(b),  of  this  section.  Show  in  this  se¬ 
quence  even  though  an  entry  may  not 
be  required  for  all  items. 

(2)  Us©  keywords  shown  below  (l.e., 
SYSNAME,  RECORD-CATEGORY,  etc.) 


Explanations  of  keywords  are  shown  in 
parentheses,  but  do  not  use. 

(3)  Do  not  use  paragraph  or  subpara¬ 
graph  numbers  or  letters. 

(4)  Do  not  underline  any  part  of  the 
text. 

(5)  Do  not  use  hyphenation  at  the  end 
of  a  line  or  subdivide  a  word  at  the  end 
of  a  line. 

(6)  Do  not  reference  information  from 
other  parts  within  the  system  of  records 
being  described. 

(7)  Use  all  standard  typewriter  char¬ 
acters  except  for  the  following  which 
will  be  used  as  indicated: 

(1)  Use  “4-”  to  precede  each  major 
group  keyword  (e.g.,  plus  SYSNAME, 
etc.) . 

(ii)  Use  to  precede  each  major 
subgroup  keyword  (e.g.  ‘safeguards, 
etc.).  The  “0”  used  in  original  Privacy 
Act  submission  instructions  is  no  longer 
valid. 

(iii)  Use  “$”  to  precede  the  test  follow¬ 
ing  each  major  group  or  subgroup  head¬ 
ings.  Do  not  use  subparagraphs. 

(iv)  Use  to  precede  each  line 

entry  when  names,  addresses,  etc.,  re¬ 
quire  a  column  or  list  format.  Multiple 
addresses  or  listings  within  a  single  col¬ 
umn  are  not  permitted.  In  instances 
where  more  than  one  address  or  list  is 
required,  enter  all  addresses  or  lists  in 
paragraph  form,  from  left  to  right  across 
the  page. 

(v)  Do  not  use  “=”  character.  It  is  re¬ 
served  for  other  purposes. 

(8)  All  information  will  be  typed  flush 
with  the  left  margin,  using  the  charac¬ 
ters  indicated  in  (a)  (7)  of  this  section 
to  distinguish  between  major  groupings 
of  information  and  paragraphs. 

(9)  Refer  to  paragraph  (c)  of  this  sec¬ 
tion  for  systems  which  may  qualify  for 
exemption. 

(10)  Number  the  pages  separately  for 
each  draft  system  notice. 

(11)  New  and  revised  system  notices 
shall  be  prepared  in  accordance  with  the 
initial  Privacy  Act  submission  instruc¬ 
tions  as  modified  by  this  Part.  All  notices 
are  to  be  submitted  in  full  (i.e.  no  par¬ 
tial  system  notices  shall  be  accepted). 

(b)  Sequence  of  submissions  and  in¬ 
structions — (1)  Manual  or  automated. 
Indicate  whether  the  system  Is  manual 
or  automated.  An  automated  system 
would  include  records  processed,  main¬ 
tained,  or  both,  in  a  machine  readable 
medium,  such  as  EAM  Cards,  computer 
tapes,  or  disks,  word  processing  tapes  and 
cards,  etc.  A  manual  system  would  in¬ 
clude  records  processed,  maintained,  or 
■both,  in  a  human  readable  medium  such 
as  paper  records  in  file  folders,  visible  or 
vertical  file  cards,  microfiche,  roll  micro¬ 
film,  photographs,  etc.  A  mechanized  file 
which  requires  substantial  human  inter¬ 
vention  for  processing  or  maintenance  is 
considered  to  be  manual,  rather  than 
automated. 

(2)  System  name  (SYSNAME) .  When¬ 
ever  applicable,  identify  the  system  by 
number  and  title  prescribed  in  your  files 
or  records  disposition  manual.  Use  locally 
originated  titles  for  files  which  are  not 
described  specifically  and  adequately  in 
the  manual  or  which  are  otherwise 


unique  to  the  reporting  office.  If  more 
than  one  system  is  covered  by  a  file  de¬ 
scription,  identify  each  system.  If  several 
files  (separately  described  in  your  man¬ 
ual)  are  a  part  of  a  single  system  identify 
the  system  only  (see  (b)  (6)  of  this  sec¬ 
tion,  for  identification  of  separate  files 
which  form  a  system).  Provide  system 
and  file  title  in  unclassified  form.  Do  not 
use  abbreviations,  nicknames,  or  acro¬ 
nyms  unless  spelled  out  the  first  time 
used.  Place  acronyms  in  parentheses  im¬ 
mediately  following  the  title. 

(3)  Security.  Specify  the  Defense  or 
other  security  classification  for  the  sys¬ 
tem  of  records  if  classified  pursuant  to 
the  provisions  of  DoD  5200. 1R  (32  CFR 
Part  159)  and  implementing  directives. 
Do  not  cite  as  a  classification  “Internal 
Working  Paper,  Eyes  Only,”  or  similar 
marking  used  for  internal  control  or 
other  handling  purposes.  If  unclassified, 
including  “For  Official  Use  Only,”  state 
unclassified. 

(4)  Location.  If  the  system  is  main¬ 
tained  in  a  single  location,  provide  the 
exact  name  of  the  office,  organization, 
and  correspondence  or  routing  symbol. 
On  the  other  hand,  if  it  is  geographi¬ 
cally  or  organizationally  decentralized, 
specify  each  type  of  organization  or  ele¬ 
ment  that  maintains  a  segment  of  the 
system.  For  example,  if  the  system  was 
comprised  of  clinical  records,  then  med¬ 
ical  centers  and  hospitals,  and  the  Na¬ 
tional  Personnel  Records  Center  would 
be  listed  as  locations.  Where  automated 
data  systems  encompass  a  central  com¬ 
puter  facility,  with  input/output  termi¬ 
nals  at  several  geographical  locations, 
list  by  category  each  location  under  this 
heading.  In  all  Instances  where  multiple 
locations  are  referred  to  by  type  of  or¬ 
ganization,  state  that  official  mailing  ad¬ 
dresses  are  in  the  Department  of  Defense 
Directory  in  the  appendix  to  the  Compo¬ 
nent’s  systems  notice.  However,  In  all 
cases,  give  the  official  mailing  address 
if  the  office  maintaining  the  system  is 
not  listed  in  the  Federal  Register.  If  the 
address  is  classified,  so  state.  Be  sure  to 
list  each  type  of  organization  maintain¬ 
ing  a  segment  or  duplicate  of  the  sys¬ 
tem,  since  maintenance  by  a  type  of 
organization  not  reported  herein  will 
constitute  a  violation  of  the  Privacy  Act 
of  1974.  When  indicating  domestic  ad¬ 
dresses,  use  the  United  States  Postal 
Service  two  letter  State  abbreviation  and 
the  Zip  Code. 

(5)  Individual  category;  (categories  of 
individuals  covered  by  the  system ) .  The 
purpose  of  this  requirement  is  to  permit 
an  individual  to  determine  whether  or 
not  information  on  him  might  be  in  the 
system  of  records.  Categories  of  individ¬ 
uals,  therefore,  should  be  stated  in  easily 
understood,  non- technical  terms  and  in¬ 
clude  all  categories  of  Individual  on 
whom  records  are  maintained.  Avoid 
using  broad  general  descriptions,  such 
as  “all  military  personnel,”  unless  the 
system  applies  to  all  military  personnel. 
For  example,  the  Joint  Uniform  Military 
Pay  System  (JUMPS)  applies  to  all  mil¬ 
itary  personnel  on  active  duty,  while  a 
system  of  absentee  case  files  would  ap¬ 
ply  only  to  deserters  and  escaped  prison- 
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ers.  All  categories  of  individuals  included 
in  the  system  must  be  listed,  regardless 
of  the  frequency  of  inclusion  or  the  num¬ 
ber  of  records  involved.  (All  future 
changes  to  the  system,  which  broaden  or 
increase  the  categories  of  individuals 
covered,  will  require  preparation  and 
publication  of  a  revised  public  notice  in 
the  Federal  Register.) 

(6)  Record  category;  (.categories  of 
records  in  the  System ) .  Briefly  describe 
in  non-technical  terms  all  types  of  rec¬ 
ords  in  the  system.  For  example,  under 
JUMPS,  the  types  of  records  will  in¬ 
clude,  but  not  be  limited  to,  individual 
military  pay  records  and  substantiating 
documents,  such  as  certificates  for  de¬ 
ductions  and  retained  military  pay  or¬ 
ders  and  records  of  travel  payments;  fi¬ 
nancial  record  data  folders;  miscellane¬ 
ous  military  vouchers;  laundry  and  dry 
cleaning  statements,  copies  of  morning 
or  strength  reports  or  other  rosters;  and 
personal  financial  records.  For  auto¬ 
mated  systems,  do  not  list  source  docu¬ 
ments  unless  they  are  retained  and  filed 
by  name,  SSN,  or  other  individual  iden¬ 
tifier.  Instead,  list  the  categories  of  in¬ 
formation  stored  in  the  system.  Be  sure 
to  include  all  types  records  in  the  sys¬ 
tem,  regardless  of  their  frequency  or  vol¬ 
ume  of  accumulation,  since  future  addi¬ 
tions  of  new  types  of  records  will  require 
preparation  and  publication  of  revised 
public  notices  in  the  Federal  Register. 

(7)  Authority;  ( authority  for  mainte¬ 
nance  of  the  System ).  Cite  the  specific 
provision  of  a  Federal  statute  or  Execu¬ 
tive  Orderof  the  President,  including  the 
title  thereof,  which  authorizes,  or  pro¬ 
vides  a  legal  basis  for,  maintenance  of 
the  system.  Do  not  cite  regulations.  In 
this  connection,  authority  for  a  system 
may  be  derived  from  a  statute  or  Execu¬ 
tive  Order  which: 

(I)  Explicitly  authorizes  or  directs  the 
component  to  maintain  a  system  of 
records. 

(II)  Authorizes  or  directs  the  compo¬ 
nent  to  perform  a  function,  the  discharge 
of  which  requires  maintenance  of  the 
system  of  records. 

Note:  Check  with  the  appropriate  Judge 
advocate  or  legal  officer  for  assistance  In  de¬ 
termining  the  statutory  or  regulatory  basis 
for  the  system. 

(8)  Routine-uses;  ( routine  uses  of  rec¬ 
ords  maintained  in  the  System,  includ¬ 
ing  categories  of  users  and  the  purposes 
of  such  uses),  (i)  Essentially,  this  re¬ 
quirement  calls  for  the  following  infor¬ 
mation  in  nontechnical  terms : 

(A)  The  purpose  (s)  for  which  infor¬ 
mation  in  the  system  is  collected. 

(B)  Each  category  of  user. 

(C)  The  specific  use(s)  made  of  the 
information  by  each  user. 

(ii)  Each  category  of  user  and  each  use 
must  be  reported.  Any  proposed  new  use 
or  category  of  user,  or  change  in  an 
existing  use,  which  has  the  effect  of  ex¬ 
panding  the  availability  of  the  informa¬ 
tion  in  the  system,  will  require  publica¬ 
tion  of  a  revised  notice  in  the  Federal 
Register.  Any  such  proposed  change  In 
a  routine  use  must  also  be  described  In 
an  advanced  notice  in  the  Federal  Reg¬ 


ister  to  permit  30  days  for  public  com¬ 
ment  before  it  is  implemented.  As  de¬ 
fined  by  5  UJS.C.  552a,  the  term  "rou¬ 
tine  use"  means  with  respect  to  the  dis¬ 
closure  of  a  record,  the  use  of  such  rec¬ 
ord  for  a  purpose  which  is  compatible 
with  the  purpose  for  which  it  was  col¬ 
lected. 

(iii)  “Uses”  can  be  distinguished  from 
“purposes”  in  that  "purposes"  describe 
the  objectives  for  collecting  or  maintain¬ 
ing  information.  “Uses”  are  the  specific 
ways  or  processes  in  which  the  informa¬ 
tion  is  employed,  including  the  persons 
or  organizations  to  whom  the  record 
may  be  disclosed.  For  example,  the  pur¬ 
poses  for  collecting  information  may  be 
to  evaluate  an  application  for  a  veter¬ 
an's  benefit  and  to  issue  checks.  Uses 
may  include  verification  of  certain  in¬ 
formation  with  the  appropriate  Military 
Service  and  release  of  check  data  to  the 
Treasury  Department.  List  under  rou¬ 
tine  uses  if  contractors  are  engaged  to 
perform  a  service,  such  as  key  punch, 
optical  scan,  or  telecommunications  in 
connection  with  the  operation  of  an  au¬ 
tomated  data  system.  List  also  Federal 
agencies  to  which  personal-type  in¬ 
formation  is  disclosed,  including  auto¬ 
mated  system  interfaces,  and  the  pur¬ 
poses  for  which  the  disclosures  are  made. 

(iv)  Each  proponent  of  a  system  (i.e., 
that  office  or  organization  proposing,  di¬ 
recting,  or  otherwise  responsible  for  the 
system)  must  prescribe  the  “routine” 
uses  of  the  records.  Routine  use  does  not 
merely  encompass  the  common  and  or¬ 
dinary  uses  to  which  records  are  put,  but 
also  includes  all  of  the  proper  and  neces¬ 
sary  uses  regardless  of  frequency.  For 
example,  individual  Income  tax  returns 
are  routinely  used  by  the  Internal  Reve¬ 
nue  Service  to  audit  the  amount  of  tax 
due  and  for  assistance  on  collection  of 
such  tax  by  civil  proceedings.  They  are 
used  less  often,  however,  for  referral  to 
the  Department  of  Justice  for  possible 
criminal  prosecution  of  fraud  or  tax  eva¬ 
sion.  Therefore,  the  “routine”  use  of  such 
records  will  include  referrals  to  the  De¬ 
partment  of  Justice.  In  addition,  descrip¬ 
tion  of  "routine  use”  shall  include  the 
fact  that  any  individual  records  in  a  sys¬ 
tem  of  records  may  be  transferred  to  any 
component  of  the  Department  of  De¬ 
fense.  It  shall  be  expected  normally  that 
“routine  use”  will  include  disclosure  to 
law  enforcement  or  investigatory  au¬ 
thorities  for  investigation  and  possible 
criminal  prosecution,  civil  court  action, 
or  regulatory  order. 

(9)  Policy -practice  (policies  and  prac¬ 
tices  for  storing,  retrieving,  accessing,  re¬ 
taining,  and  disposing  of  records  in  the 
System).  Describe  how  records  in  the 
system  are  managed  during  their  life- 
cycle.  When  feasible,  extract  pertinent 
information  from  your  files  or  records 
disposition  manual. 

(i)  Storage.  In  describing  records  stor¬ 
age,  specify  the  medium  in  which  they 
are  maintained,  such  as  paper  records 
in  file  folders,  visible  or  vertical  file 
cards,  computer  magnetic  tapes,  or  disks, 
computer  paper  printouts,  aperture 
cards,  microfiche,  roll  microfilm,  photo¬ 
graphs,  video-tape,  etc. 


(ii)  Retrievability.  Specify  how  infor¬ 
mation  is  accessed  and  retrieved,  such  as 
by  name,  social  security  account  num¬ 
ber  (8SAN) ,  military  service  number  or 
other  identification  number,  classifica¬ 
tion  or  personal  characteristics,  such  as 
fingerprint  classification,  voice  print 
identifier,  etc.  Indicate  further  whether 
conventional  or  computerized  indices  are 
required  to  retrieve  individual  records 
from  the  system. 

(iii)  Safeguards.  Describe  what  meas¬ 
ures  are  taken  to  prevent  unauthorized 
disclosure  of  the  records  and  state  the 
categories  of  individuals  authorized  ac¬ 
cess  to  the  records.  Specify  system  safe¬ 
guards,  such  as  safes,  vaults,  locked  cab¬ 
inets  or  rooms,  guards  personnel  screen¬ 
ing,  visitor  registers,  computer  “fail¬ 
safe”  systems  software,  etc. 

Note:  Do  not  describe  security  safeguards 
In  6uch  detail  as  to  increase  the  risk  of  un¬ 
authorized  access  to  the  records. 

(iv)  Retention;  (retention  and  dis¬ 
posal).  State  rules  on  how  long  the 
records  are  to  be  maintained;  if  and 
when  they  are  moved  to  Federal  Records 
Centers  or  to  the  National  Archives  or 
other  designated  despository;  and  if, 
when,  and  how  they  are  destroyed  or 
otherwise  disposed  of.  Changes  in  this 
item  will  not  normally  require  immediate 
publication  of  a  revised  public  notice  un¬ 
less  they  reflect  an  expansion  in  the 
availability  of  or  access  to  the  system  of 
records. 

(10)  Systems  Manager  (SYSMANAG- 
ER) ;  ( title  and  duty  address  of  the 
Agency  officials  responsible  for  the  Sys¬ 
tem)  .  In  all  cases,  enter  the  title  of  the 
official  who  is  responsible  for  policies  and 
procedures  governing  the  system,  i.e.,  Di¬ 
rector,  Personnel,  DASD(A) ,  Pentagon, 
Washington,  D.C.  20301.  If  the  title  of 
the  official  is  unknown  (such  as  for 
locally  evolved  systems),  specify  the 
office  head  as  the  responsible  official.  In 
addition,  for  geographically  or  organiza¬ 
tionally  decentralized  systems,  where  in¬ 
dividuals  may  deal  directly  with  agency 
officials  at  each  location  to  exercise  their 
rights  under  the  Privacy  Act  of  1974,  give 
the  position  or  duty  title  of  each  cate¬ 
gory  of  official  responsible  for  the  system 
or  a  segment  thereof.  For  example,  in  the 
case  of  clinical  records,  the  entries  would 
be:  The  Surgeon  General,  USA  or  USAF, 
Chief,  Bureau  of  Medicine  and  Surgery 
(USN) ,  commanders  of  medical  centers 
and  hospitals,  and  the  Director,  Na¬ 
tional  Personnel  Records  Center,  111 
Winnebago  St.,  St.  Louis,  Missouri  63118. 
Do  not  include  the  duty  address  if  al¬ 
ready  listed  in  organizational  directories 
mentioned  in  (b)  (4) ,  of  this  section. 

(11)  Notification;  (procedure  whereby 
individuals  can  be  notified  at  their  re¬ 
quest  if  the  System  contains  records  per¬ 
taining  to  them) . 

(i)  Indicate  whether  or  not  requests 
from  individuals  should  be  addressed  to 
the  above  SYSMANAGER,  as  in  (b)  (10) 
of  this  section.  If  requests  are  to  be  ad¬ 
dressed  to  any  other  officials,  list  them 
by  duty  or  position  titles. 

(ii)  Specify  what  Information  will  be 
required  from  the  requesting  Individual 
to  determine  whether  or  not  the  system 
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contains  a  record  about  him  such  as  full 
name,  military  status,  SSN  or  service 
number,  resident  or  non  resident,  etc. 

(iii)  List  by  specific  name,  or  cate¬ 
gories,  those  offices  which  the  requester 
may  visit  to  obtain  information  on 
Whether  or  not  the  system  contains 
records  pertaining  to  him. 

(iv)  For  personal  visits,  specify  what 
data  the  requester  must  present  as  proof 
of  identity,  such  as  a  combination  of  full 
name,  date  and  place  of  birth,  parents’ 
names,  driver’s  license,  medicare  card, 
etc.  Do  not  require  verification  of  Iden¬ 
tity  for  records  which  are  disclosable 
under  the  Freedom  of  Information  Act. 

(12)  Access;  (.procedures  whereby  an 
individual  can  be  notified  at  his  request 
how  he  can  gain  access  to  any  record 
pertaining  to  himself  contained  in  the 
System  of  Records ) .  Include  the  title  or 
category  of  officials  who  can  provide 
assistance,  if  those  officials  are  other  than 
the  SYSMANGER.  If  the  mailing 
addresses  are  listed  in  the  organiza¬ 
tional  directory,  state  that  official  mail¬ 
ing  addresses  are  in  the  Department  of 
Defense  Directory  in  the  appendix  to  the 
Component’s  systems  notice.  Specific 
locations  and  telephone  numbers  of 
offices  may  be  indicated  for  unique  or 
centralized  systems. 

(13)  Contest;  ( rules  for  access  and 
contesting  contents  of  records) .  To  com¬ 
ply  with  this  requirement,  merely,  state: 
“The  agency’s  rules  for  access  to  records 
and  for  contesting  contents  and  appeal¬ 
ing  initial  determinations  by  the  indi¬ 
vidual  concerned  may  be  obtained  from 
the  SYSMANAGER.” 

(14)  Source;  (categories  of  sources  of 
records  in  the  system) .  List  by  type  each 
source  of  information  in  the  system,  e.g., 
previous  employers,  financial  institu¬ 
tions,  educational  institutions,  trade  as¬ 
sociations,  automated  system  interfaces, 
etc.  Specific  individuals  or  institutions 
need  not  be  identified  by  name.  Also,  do 
not  list  as  a  source  individuals  who  pro¬ 
vided  information  on  themselves.  Again, 
be  sure  to  Include  all  types,  since  collec¬ 
tion  of  information  from  types  of  sources 
other  than  those  listed  will  require  pub¬ 
lication  of  a  revised  public  notice  in  the 
Federal  Register  before  any  information 
is  collected  from  those  sources. 

(c)  Systems  qualified  and  proposed  for 
exemption.  (1)  Generally,  the  following 
records  may  be  exempted  from  the  pro¬ 
visions  of  (b)  (11),  (12),  (13),  and  (14) 
of  this  section  (subsection  (e)(4)  (G), 
(H)  and  (I)  of  the  Privacy  Act  of  1974) ; 
records  maintained  by  the  Central  In¬ 
telligence  Agency;  records  compiled  to 
ensure  protection  of  the  President  or 
other  officials,  classified  records,  records 
required  by  statute  to  be  maintained  and 
used  solely  as  statistical  records;  inves¬ 
tigatory  records  compiled  solely  for  the 
purpose  of  determining  suitability,  eligi¬ 
bility,  or  qualifications  for  Federal  civil¬ 
ian  employment,  military  servioe,  Fed¬ 
eral  contracts,  or  access  to  classified  in¬ 
formation,  but  only  to  the  extent  as  out¬ 
lined  in  subsection  (k)  (5)  of  the  Privacy 
Act  of  1974;  certain  testing  and  exami¬ 
nation  material;  and  certain  material 
used  to  evaluate  potential  for  promotion 
in  the  Armed  Services.  All  items  in  (b) 
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of  this  section  will  be  completed  for  sys¬ 
tems  proposed  for  exemption,  except  for 

(b)  (11),  (12),  (13),  and  (14)  of  this 
section. 

(2)  Cite  the  system  name  and  specific 
provisions  of  the  Privacy  Act  of  1974 
from  which  the  system  is  to  be  exempted 
and  the  reasons  therefor.  Consult  with 
the  legal  staff  for  detailed  guidance  for 
systems  which  may  be  eligible  for  ex¬ 
emption.  Proponents  of  systems  dealing 
with  the  above  types  of  records  should 
contact  the  OSD  Records  Management 
Branch,  DASD(A),  Room  5C315,  Penta¬ 
gon,  Washington,  D.C.  20301,  or  appro¬ 
priate  comparable  Defense  component 
records  management  staff  for  additional 
guidelines,  if  necessary,  for  preparing 
exemption  notices  for  publication  in  the 
Federal  Register. 

Not*:  No  system  of  records  Is  exempted 
from  the  public  notice  requirements  of  the 
Privacy  Act  of  1974.  Failure  to  publish  such 
a  notice  constitutes  a  criminal  violation. 

§  286b.  10  Format  of  Four  Points  Re* 
quired  on  Forms  Requesting  Per¬ 
sonal  Information. 

Privacy  Act  of  1974 

STATEMENT 

(a)  Authority. 

Note:  If  the  social  security  number  Is  re¬ 
quested  among  other  items  of  personal  infor¬ 
mation,  the  authority  for  requesting  such 
number  Is  different  from  the  authority  for 
the  other  Items,  should  also  be  shown  In  this 
block. 

(b)  Principal  purpose  or  purposes. 

(c)  Routine  uses. 

(d)  Whether  disclosure  is  mandatory 
or  voluntary  and  effect  on  individual  of 
not  providing  information. 

(Refer  to  S  286b.5(e)  of  this  Part.) 

§  286b.  11  Procedures  for  exemptions. 

(a)  General  information.  (1)  The  Sec¬ 
retary  of  Defense  proposes  to  exempt 
under  the  specified  provisions  of  the 
Privacy  Act  of  1974  (Pub.  L.  93-579) 
those  systems  of  records  listed  in  this 
part. 

(2)  Any  person  interested  in  the  ex¬ 
emptions  proposed  herein  may  partici¬ 
pate  in  this  proposed  rulemaking  by 
submitting  either  in  person  or  through 
the  mail,  written  data,  views,  or  argu¬ 
ments  on  the  proposed  exemptions  to 
the  Deputy  Assistant  Secretary  of  De¬ 
fense  (Administration) ,  Room  3E827, 
The  Pentagon,  Washington,  D.  C.  20330, 
on  or  before  September  25,  1975. 

(3)  All  systems  of  records  maintained 
by  the  Office  of  the  Secretary  of  Defense 
shall  be  exempt  from  the  requirements 
of  5  U.S.C.  552a  (d)  pursuant  to  5  U.S.C. 
552a(3)  (k)  (1)  to  the  extent  that  the 
system  contains  any  information  prop¬ 
erly  classified  under  Executive  Order 
11652,  “Classification  and  Declassifica¬ 
tion  of  National  Security  Information 
and  Material,  “dated  March  8,  1972  (37 
FR  10053,  May  19,  1972),  and  which  is 
required  by  the  Executive  Order  to  be 
kept  secret  in  the  interest  of  national 
defense  or  foreign  policy.  This  exemp¬ 
tion,  which  may  be  applicable  to  parts 
of  all  systems  of  records,  is  necessary 
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because  certain  record  systems  not  other¬ 
wise  specifically  designated  for  exemp¬ 
tions  may  contain  Isolated  information 
which  has  been  properly  classified. 

(b)  Specific  exemptions,  (i)  Protective 
Services  File 

(A)  Exemption.  This  system  of  records 
is  exempt  from  the  following  provisions 
of  5  U.S.C.  Section  552a:  (C)(3)(d). 

(e)(1),  (e)(4)(G),  (e)(4)(H),  (e)(4) 

(I) ,  and  (f). 

(B)  Authority.  5  U.S.C.  552a(k)  (2)  and 
(3). 

(C)  Reasons.  The  above  exemptions, 
authorized  by  5  UJS.C.  552a(k)(2),  are 
necessary  to  protect  the  information 
contained  in  this  system  of  records  be¬ 
cause  the  information  is  used  to  identify 
individual  criminal  offenders  and  alleged 
offenders;  is  compiled  for  the  purpose  of 
criminal  investigation  and  Includes  re¬ 
ports  of  informants  and  investigators. 
The  above  exemptions,  authorized  by  5 
U.S.C.  552a (k)  (3) ,  are  necessary  to  pro¬ 
tect  the  information  contained  in  this 
system  of  records  because  some  of  the 
information  is  maintained  in  connection 
with  providing  protective  services  to  the 
President  of  the  United  States  and  other 
individuals  pursuant  to  18  U.S.C.  3056. 

(c)  Specific  exemptions.  (1)  Industrial 
Personnel  Security  Clearance  Case 
Files: 

Exemption.  This  system  of  records  is 
exempt  from  those  provisions  of  title  5, 
U.S.  Code,  section  552a,  which  would  re¬ 
quire  the  disclosure  of  the  Identity  of  a 
source  who  furnished  information  to  the 
Government  under  an  expressed  promise 
that  the  identity  of  the  source  would  be 
held  in  confidence  or  prior  to  the  effec¬ 
tive  date  of  this  section,  under  an  im¬ 
plied  promise  that  the  identity  of  the 
source  would  be  held  in  confidence.  A  de¬ 
termination  will  be  made  at  the  time  of 
the  request  for  a  record  concerning  the 
specific  information  which  would  reveal 
the  identity  of  the  source. 

(2)  Authority.  5  U.S.C.  552a(k)  (5) . 

(3)  Reasons.  This  exemption  is  re¬ 
quired  in  order  to  protect  the  confiden¬ 
tiality  of  the  sources  of  Information  com¬ 
piled  for  the  purpose  of  determining  ac¬ 
cess  to  classified  information.  This 
confidentiality  helps  maintain  the 
Government’s  continued  access  to  in¬ 
formation  from  persons  who  would  oth¬ 
erwise  refuse  to  give  it. 

(d)  Specific  exemptions.  (1)  The  Of¬ 
fice  of  the  Secretary  of  Defense  Clear¬ 
ance  File: 

(A)  Exemption.  This  system  of  rec¬ 
ords  is  exempt  from  those  provisions  of 
title  5,  U.S.  Code,  section  552a,  which 
would  require  the  disclosure  of  the  iden¬ 
tity  of  a  source  who  furnished  infor¬ 
mation  to  the  Government  under  an  ex¬ 
pressed  promise  that  the  identity  of  the 
source  would  be  held  in  confidence  or 
prior  to  the  effective  date  of  this  section, 
under  an  implied  promise  that  the  iden¬ 
tity  of  the  source  would  be  held  in  con¬ 
fidence.  A  determination  will  be  made  at 
the  time  of  the  request  for  a  record  con¬ 
cerning  the  specific  information  which 
would  reveal  the  identity  of  the  source. 

(B)  Authority.  5  U.S.C.  552a(k)  (5) . 

(C)  Reasons.  This  exemption  is  re¬ 
quired  in  order  to  protect  the  confiden- 
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tiality  of  the  sources  of  Information 
compiled  for  the  purpose  of  determining 
access  to  classified  information.  This 
confidentiality  helps  maintain  Govern¬ 
ment's  continued  access  to  Information 
from  persons  who  would  otherwise  refuse 
it. 

§  286b.  12  Effective  date  and  implemen¬ 
tation. 

The  effective  date  and  implementation 
of  this  Part  shall  be  September  27,  1975. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives,  OASD  ( Comptroller ) . 

August  18,  1975. 

IFR  Doc.75-22214  Piled  8-25-75;8:45  am] 


PROPOSED  RULES 

Uniformed  Services  University  of  the 
Health  Sciences 

[  32  CFR  Part  286e  ] 

PRIVACY  ACT  OF  1974 
Notice  of  Proposed  Rulemaking 

Congress  enacted  the  Privacy  Act  of 
1974  (Pi.  93-579,  88  Stat.  1896,  5  UJ3.C. 
552a)  which  requires  each  federal  agency 
that  maintains  any  system  of  records  as 
defined  in  the  statute  to  promulgate 
rules  pursuant  to  the  provisions  of  the 
Act 

Notice  is  hereby  given  that  the  Uni¬ 
formed  Services  University  of  the  Health 
Sciences  proposes  to  add  Part  286e  to 
Implement  the  provisions  of  the  Privacy 
Act  of  1974. 


§  286c.  1  Source  of  regulations. 

The  Uniformed  Services  University  of 
the  Health  Sciences  is  governed  by  the 
Privacy  Act  implementation  regulations 
of  the  Office  of  the  Secretary  of  Defense, 
32  CFR  Part  286b. 

As  indicated,  the  Uniformed  Services 
University  of  the  Health  Sciences  imple¬ 
mentation  of  the  Privacy  Act  is  provided 
for  In  32  CFR  Part  286b. 

Maurice  W.  Roche, 
Director,  Correspondence  and 
Directives,  OASD  ( Comptroller ) . 

August  14, 1975. 

(PR  Doc.75-22211  Filed  8-25-75; 8:46  am] 
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